Security Engineer, DevSecOps | Remote US - Coalfire Denver, CO Bookmark Share Print 269 0 0

Listing Description

About Coalfire

Coalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  
But that’s not who we are – that’s just what we do. 

We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.   

And we’re growing fast. 

We’re looking for a Security Engineer of DevSecOps to support our Information Security team.

Position Summary

The Security Engineer – DevSecOps position will provide security leadership within our product engineering teams.  This resource will coordinate security requirements and standards throughout the product lifecycle by working closely with Engineering Development Operations to manage the vulnerabilities, cryptography, security monitoring, and risk management controls within our application-based products.

What You'll Do
  • Be a member of Coalfire Information Security Team and liaison with Product DevOps teams to ensure compliance to information security standards
  • Detect, analyze, and react to detected security events, such as vulnerabilities, potential intrusions, and malware detections within the Coalfire product environments
  • Perform regular DASTs and SASTs against the various cloud and stand-alone applications that comprise our product lineup
  • Track trends against various metrics that capture the risk, threats, and vulnerabilities within the product environment
  • Provide leadership and guidance to DevOps teams on how to prioritize and implement remediation activities for application flaws
  • Be a champion for security within all stages of the SDLC

    • What You'll Bring
  • 4-7 years in information security
  • Familiarity with open source and commercial application security tools and frameworks
  • Experience in exploiting web applications and web services using application vulnerabilities, including XSS, CSRF, injection, DoS and API attacks
  • Experience with the design and deployment of servers, applications, and containers in AWS
  • Experience with network security and network technologies
  • Strong verbal and written communication skills;
  • Familiarity or direct experience with DevOps processes, including CI/CD pipelines and related tools
  • Familiarity with Agile-based development lifecycle processes, such as iteration planning, stand ups, and retrospectives
  • Knowledge of cloud security designs, deployments, and monitoring
  • Mastery of application security concepts, such as threat modeling and secure coding techniques

    • Required Certifications
  • At least one security certification, such as CISM, CISA, CISSP, Security+, CCSP, etc.

    • Bonus Points
  • MS in Information Security or IT related discipline;
  • In good standing with multiples major security certification (CISSP, CISM, CGEIT, CISA or similar)
  • Previous experience in network or application penetration testing, IT controls assessments/audits, or hunt response exercises.
    • Why You'll Want to Join Us

    At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office. 

    Regardless of location, you’ll experience a company that prioritizes connection and well being and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options. 
     
    At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $86,000 to $148,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs. 


    #LI-Remote
    #LI-HJ1

    Listing Details

    • Citizenship: Not Provided
    • Incentives: Not Provided

     

    • Education: Not Provided
    • Travel: Not Provided
    • Telework: Not Provided

    About Us

    NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

    Useful Links

    Our Contacts

    1765 Greensboro Station Pl.
    Suite 900
    Tysons Corner Va 22102

    (703) 594-7765

    requests@ninjajobs.org
    www.ninjajobs.org
    Chat with us!