The Weather Company - Drop - DevOps Engineer

The DevSecOps Engineer will play a key role, working with the core application engineering team and the cybersecurity lead to ensure that all DROP Platform offerings meet security and compliance goals.

ABOUT THE JOB

Responsibilitiesset up and automate regular system patchingset up and automate static and dynamic code scanningset up and automate vulnerability scanningautomate creation of tickets and production of evidence from scanning tasksautomate change management processesbuild security and compliance dashboards and reportsperform security reviews on build environments and ensure all systems are maintained with the latest patches and that security best practices are being followedparticipate in agile/scrum processes to help ensure that security deliverables are triaged, prioritized, and slipstreamed into product delivery processesCollaborate and coordinate with 3rd party security consultants.Manage audit processes and triage results with the team.

RESPONSIBILITIES✨

• Set up and automate regular system patching
• Set up and automate static and dynamic code scanning
• Set up and automate vulnerability scanning
• Automate creation of tickets and production of evidence from scanning tasks
• Automate change management processes
• Build security and compliance dashboards and reports
• Perform security reviews on build environments and ensure all systems are maintained with the latest patches and that security best practices are being followed
• Participate in agile/scrum processes to help ensure that security deliverables are triaged, prioritized, and slipstreamed into product delivery processes
• Collaborate and coordinate with 3rd party security consultants
• Manage audit processes and triage results with the team

QUALIFICATIONS✨

• 5+ years professional experience as a DevSecOps engineer
• Deep understanding of build automation processes and tools (Github actions, Vercel, Jenkins, TravisCI, ...)
• Expertise with container technologies (Docker, Kubernetes, Helm, ...)
• Experience with different compliance standards (SOC2, CMMC, NIST, ISO)
• Familiarity of the Department of Defense (DoD) Impact Level 6
• Ability to script/code in at least two of the following languages: bash, perl, python, ruby, groovy, JavaScript, php
• Solid understanding and experience with APIs (REST, XML, JSON)
• Extensive experience with at least one cloud provider (AWS, Azure, ...)
• Experience with security tooling (Checkmarx, OWASP Zap, Skyk, Dependabot, ...)
• Familiarity with issue tracking systems, especially JIRA
• Good communication and organizational skills
• Self-starter, open to learning new skills and accepting new challenges

ADDITIONAL ELIGIBILITY

5+ years professional experience as a DevSecOps engineerDeep understanding of build automation processes and tools (Github actions, Vercel, Jenkins, TravisCI, ...)Expertise with container technologies (Docker, Kubernetes, Helm, ...)Experience with different compliance standards (SOC2, CMMC, NIST, ISO)Familiarity of the Department of Defense (DoD) Impact Level 6Ability to script/code in at least two of the following languages: bash,perl, python, ruby, groovy, JavaScript, phpSolid understanding and experience with APIs (REST, XML, JSON)Extensive experience with at least one cloud provider (AWS, Azure, ...)Experience with security tooling (Checkmarx, OWASP Zap, Skyk, Dependabot, ...)Familiarity with issue tracking systems, especially JIRAGood communication and organizational skillsSelf-starter, open to learning new skills and accepting new challenges

ELIGIBLE SERVICE BRANCHES

US Air Force, US Army, US Coast Guard, US Marine Corps, US Navy, US Space Force

OTHER

Apply for consideration for this opportunity here:https://job-boards.greenhouse.io/theweathercompany/jobs/5050445007