DevSecOps SCA Engineer 1212260
DevSecOps SCA Engineer who embeds Software Composition Analysis into CI/CD pipelines, monitoring open-source dependencies for vulnerabilities and compliance while automating security testing. Requires strong DevOps tooling (Jenkins, Git, Azure DevOps), SCA tools (Snyk, JFrog X-Ray, Sonatype Nexus, WhiteSource), and scripting in Python, Bash, or Groovy.
- Compensation
- Not disclosed
- Location
- Urbanización El Vedado, San Juan
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, IT, Cybersecurity, or related field, or equivalent practical experience
- Strong experience with DevOps tools such as Jenkins, Git, Azure DevOps
- Proven expertise in SCA tools like Sonatype Nexus, JFrog X-Ray, Snyk, or WhiteSource
- Proficiency in programming languages such as Python, Bash, or Groovy
- Deep knowledge of open-source software ecosystems and licensing models
- Solid understanding of secure application development principles and lifecycle management
- Familiarity with containerization platforms such as Docker and Kubernetes
Nice to have
- Certifications such as Certified DevSecOps Professional (CDOP) or AWS Certified Security - Specialty
- Experience working in Agile/Scrum environments
- Practical knowledge of cybersecurity standards such as OWASP, ISO 27001, and NIST
- Keen eye for detail with ability to detect, assess, and evaluate risk within complex software environments
Full description
Job Description
Job Description: DevSecOps SCA Engineer
Overview
We are seeking a dedicated DevSecOps SCA (Software Composition Analysis) Engineer to join our forward-thinking and dynamic team. This role involves integrating security practices within DevOps processes and leveraging tools to analyze software components, ensuring that our applications and systems remain resilient, secure, and reliable. If you are passionate about cybersecurity, open source, and automation, we welcome you to an innovative environment where your contributions will make a meaningful impact within our technology landscape.
At [Your Company Name], we are committed to fostering an inclusive workplace that values diversity in all forms. We strongly encourage candidates from all backgrounds, communities, identities, and experiences to apply.
Responsibilities
- Embed Security into DevOps Workflows: Implement and maintain Software Composition Analysis (SCA) as part of the CI/CD pipeline to ensure secure software delivery.
- Open Source Management: Monitor open-source components, libraries, and dependencies for vulnerabilities and compliance violations.
- Build and Scale Automation: Develop, implement, and enhance automation tools and scripts to orchestrate end-to-end security testing within DevOps pipelines.
- Vulnerability Identification and Remediation: Proactively identify security vulnerabilities, provide actionable recommendations, and collaborate with development teams to resolve identified issues.
- Collaboration Across Teams: Partner with development, operations, and security teams to ensure proper security controls and practices are followed throughout the software development lifecycle.
- Compliance Audits: Support compliance requirements such as GDPR, HIPAA, or other relevant standards by providing necessary documentation and audit-ready insights from SCA tools.
- Research and Innovation: Stay updated on the latest tools, trends, and developments within DevOps, security, and software engineering industries.
- Training and Enablement: Educate and mentor teams on secure coding practices, vulnerabilities management, and open-source risk mitigation principles.
Qualifications
Required:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
- Strong experience with DevOps tools such as Jenkins, Git, Azure DevOps, or equivalent.