DevSecOps Engineer

We are hiring for a DevSec Engineer. You must live in Atlanta and NO 3rd parties.

This is full time ( no C2C). Only Green Cards or US Citizens, nothing else

You must have

• 5 years of experience in application security or software development required.
• Strong experience with containers (Docker Kubernetes) required. Experience with other CNCF.io technologies preferred.
• Strong experience with Azure required.
• Knowledge of secure coding practices, OWASP Top 10, SANS Top 25, and common web application vulnerabilities required.

• Assist comprehensive security reviews of application architecture, design, and code across various products and platforms for cloud-based architecture.
• Drive the implementation of secure development practices, including threat modeling, security design reviews, and code analysis.
• Lead the adoption and integration of automated security tools (SAST, DAST, IAST) within CI/CD pipelines to enhance continuous security testing.
• Collaborate with product and engineering teams to identify and address security risks, build security into new products, and remediate vulnerabilities.
• Serve as a point of contact for application security incidents, leading root cause analysis, mitigation, and preventive measures.
• Stay ahead of the latest cloud-native, DevOps, GitOps, and security trends, attack techniques, and tools, and apply that knowledge to improve our security posture.
• Provide strategic input into product and engineering roadmaps, ensuring security considerations are embedded in planning and execution.
• Develop and deliver DevSecOps training programs to elevate the DevOps and security maturity of the entire development organization.
• Create runbooks, documents, policies and procedures for managing security solutions and risk areas.
• Create key performance indicators that track the progress and effectiveness of DevOps and security program
• Other duties as assigned

Again no 3rd parties, not sure why we have to posted this several times.