Development Security & Operations Engineer

Long-term employment with opportunities for growth.

Discover more about our organization, culture, and employee benefits by visiting

this page.

Explore life at Seaboard

Marine: https://explore.seaboardmarine.com/pomrecruitment

[https://nam11.safelinks.protection.outlook.com/? url=https%3A%2F%2Fexplore.seaboardmarine.com%2Fpomrecruitment&data=05%7C02%7CDihara.Soto%40seaboardmarine.com%7C2e1d64326a844052f8b408ddb9a57712%7C316a2e7c11504fbe81b8b8f849de81cd%7C0%7C0%7C638870842517409787%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2BMw37dYw9uudjil2uGu4hbEntpHwd%2BkUvkeE7oPQWM%3D&reserved=0]

We offer excellent benefits including:

• 401(K) Retirement Saving Plan w/ Employer Match

• Medical, Dental & Vision insurance

• Tuition Reimbursement

• Life Insurance

• Supplemental Medical Coverage

• Paid Time Off

• Parental Leave

• Paid Holidays

• Employee Assistance Program

• Flexible Spending Accounts

-

POSITION SUMMARY:

The development, security, and operations (DevSecOps) Engineer ensures that

security is a core part of the software development life cycle (SDLC) by

integrating security practices and tools into the company development process.

They understand and explain to developers and management the security aspect of

development and how to build secure codes. Effective interpersonal and

communication skills and the ability to work with the security and development

teams are required for this role. This position will manage and execute the

DevSecOps process daily. It will use tools to perform code scans and

verifications and collaborate with the development teams and management to

analyze the codes, show remediation steps, and identify areas for improvement.

It will also work with developers and operations staff to ensure security is a

shared responsibility, maintaining a culture of security awareness. To perform

this job successfully, an individual must be able to satisfactorily perform each

essential duty. The requirements listed below are representative, but not

necessarily a complete list, of the knowledge, skill, and/or ability required.

Reasonable accommodations may be made to enable individuals with disabilities to

perform essential functions.

GEOGRAPHIC REGION:

Applications out of the geographic region for this position will not be

considered.

QUALIFICATIONS:

Required

* Bachelor’s degree in Computer Science, Information Security, or a related

field. In lieu of a degree, a minimum 10 years’ experience in cybersecurity

and/or development.

* Proven experience in a DevOps, cybersecurity, or related role.

* Proficiency in programming languages such as Python, Java, or Ruby, and

scripting languages for automation tasks.

* Familiarity with CI/CD tools, container orchestration, and infrastructure as

code (IaC) tools.

* A strong understanding of security principles, practices, and tools. This

includes knowledge of threat modeling, risk management, security protocols,

encryption technologies, and vulnerability assessment.

* Understanding of risk assessment techniques and security best practices.

* Skills in securing cloud environments, including experience with cloud

service providers like Azure and AWS and understanding of cloud-native

security tools and practices.

* Understanding of network architectures, protocols, and secure network design.

Knowledge of system administration is also crucial for securing the

underlying infrastructure.

* Awareness of legal and regulatory requirements related to information

security, such as GDPR, HIPAA, and SOC 2.

* Ability to identify security issues and vulnerabilities and develop effective

and efficient solutions or mitigations.

* Strong communication skills to effectively collaborate with development,

operations, and business teams, and to promote a culture of security

awareness.

* Commitment to staying updated with the latest security trends, threats, and

technologies, and the willingness to continuously learn and adapt.

* Skills in handling security breaches and incidents, including the ability to

lead or participate in incident response efforts.

DUTIES AND RESPONSIBILITIES:

Primary

* Implement and maintain security tools and practices within the CI/CD

pipeline.

* Conduct regular security assessments and vulnerability testing to identify

and mitigate risks.

* Collaborate with software developers to incorporate secure coding practices.

* Use tools to automate scans, code verification, and other security tasks.

* Automate security processes to ensure seamless integration into the

development workflow.

* Monitor and respond to security incidents, ensuring rapid and effective

resolution.

* Stay updated with the latest security threats and trends and advise on

necessary updates or changes to security protocols.

* Work with cloud-based infrastructures, ensuring they are securely configured

and compliant with industry standards.

* Promote a culture of security awareness across the organization.

Secondary

* Provides IT support for regulatory and compliance activities.

* Creates helpdesk support tickets.

* Keeps IT informed on tips and techniques to enhance cyber security posture.

* Recommends security enhancements.

* Additional duties as assigned.

PHYSICAL REQUIREMENTS:

* The employee is continuously required to sit and use his fingers.

* The employee frequently is required to talk and/or hear.

* The employee is frequently required to stand and walk.

* The employee must occasionally lift and/or move up to 10 pounds.

* Specific vision abilities required by this job include close vision, distance

vision, color vision, peripheral vision, depth perception, and ability to

adjust focus.

SAFETY REQUIREMENTS:

* Report safety hazards.

* Immediately report incidents involving injury, illness, or property damage.

* Wear protective PPE (Personal Protective Equipment) as instructed or

necessary.

* Comply with all company safety policies, procedures, and rules.

* Refuse any unsafe task or operation.

* Participate in safety meetings and training.

* Be constantly aware of their personal safety and that of their coworkers.

SUPERVISION RECEIVED AND EXERCISED:

Reports directly to the Senior Manager - IT Security. Does not exercise

supervision over other staff.

CONDITIONS:

* Work is performed primarily in the office.

* The noise level in the work environment is usually quiet to moderate when

work is performed in the office environment.

DISCLAIMER:

* We are an Equal Opportunity Employer. Qualified applicants will receive

consideration for employment without regard to race, color, religion, sex,

sexual orientation, gender identity, national origin, disability, protected

veteran status, or any other protected characteristic as outlined by federal,

state, or local laws.

* If an applicant with a disability is unable or limited in their ability to

use or access our online application center as a result of their disability,

they can request reasonable accommodations by sending an email to

[email protected]

* The duties listed above are intended only as illustrations of the various

types of work that may be performed. The omission of specific statements of

duties does not exclude them from the position if the work is similar,

related or a logical assignment to the position.

* The job description does not constitute an employment agreement between the

employer and employee and is subject to change by the employer as the needs

of the employer and requirements of the job change.