DevSecOps Security Engineer

🕒 il y a 20 jours

🇺🇸 États-Unis – Télétravail

💵 $91 120 - $113 900 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 11%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Mastercam

Site WebLinkedInTous les Emplois

201 - 500 employés

Fondée en 1983

🚘 Automobile

💼 Conseil

📦 Logistique

Automotive • Consulting • Logistics

Mastercam est un fournisseur de premier plan de solutions logicielles CAD/CAM conçues pour répondre aux défis de fabrication rencontrés par diverses industries. Réputé pour ses outils innovants et son interface intuitive, Mastercam s'adresse aussi bien aux utilisateurs industriels qu'éducatifs, contribuant à rationaliser les processus de production et à améliorer la précision de l'usinage. Avec sa gamme de produits variée et son support complet, Mastercam sert de nombreux secteurs, notamment l'aérospatiale, l'automobile et l'énergie, en se positionnant comme un allié essentiel dans la fabrication moderne.

Description

• Secure Kubernetes-based platforms and containerized workloads • Implement and maintain Kubernetes security controls, including RBAC, Network Policies, Pod Security Standards, and namespace segmentation • Perform security reviews of platform architecture and application deployments • Develop infrastructure hardening standards and security baselines • Integrate security controls into CI/CD pipelines • Implement automated vulnerability scanning, code analysis, and compliance checks • Establish secure software supply chain processes • Partner with development teams to remediate vulnerabilities and improve secure coding practices • Develop and maintain security guardrails within GitOps workflows • Secure authentication and authorization systems and implement least-privilege access controls • Support identity federation, SSO, OAuth2, OpenID Connect, and MFA • Review systems for access governance and privileged access risks • Manage secrets, certificates, encryption keys, and service credentials securely • Support automated secret rotation and certificate lifecycle management • Secure API gateways and service-to-service communications • Implement API authentication, authorization, rate limiting, and threat protection controls • Support Zero Trust networking initiatives • Create security-event dashboards and alerts, metrics, and monitoring capabilities • Collaborate during security investigations and incident response activities • Analyze platform telemetry and audit logs to identify threats and control gaps • Support security reviews for AI and machine learning workloads • Help protect against prompt injection, sensitive data exposure, and model misuse • Participate in AI governance and risk assessment activities • Evaluate risks associated with LLMs, vector databases, and AI platforms

🎯 Exigences

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field required; equivalent combinations of education, military service, and relevant professional experience will also be considered • 4–5 years of experience in Security Engineering, DevSecOps, Cloud Security, DevOps, or Platform Engineering • 1+ year of hands-on experience supporting Kubernetes or containerized application environments • Experience securing cloud-native applications and services • Experience implementing vulnerability management and application security programs • Experience working with software development teams and CI/CD pipelines • Experience supporting AWS, Azure, or Google Cloud environments • Kubernetes architecture, Pods, Deployments, Services, Ingresses, RBAC, Network Policies, container security, workload isolation, and cluster security fundamentals • Docker, container image security, image scanning, vulnerability remediation, and secure image lifecycle management • CI/CD pipelines, source code management platforms, Git workflows, automation and scripting • Understanding of SAST, DAST, dependency scanning, secret scanning, and Infrastructure-as-Code security • OAuth2, OpenID Connect, SAML, MFA, and Role-Based Access Control • Vulnerability management, threat detection, security monitoring, incident response support, and risk assessments • Ability to automate security processes using Python, Bash, or PowerShell • Preferred certifications include Security+, CKA, CKS, AWS Certified Security Specialty, CISSP, CCSP, or GIAC Certifications