DevSecOps (Security) Engineer

Core Values

At Ziply Fiber, we emphasize the following values in all our interactions:

• Genuinely Caring: Our customers and colleagues are people—often our neighbors. We strive to listen attentively and understand their needs.

• Empowering You: We empower customers to choose products that best suit their needs while supporting our employees to enhance customer and coworker experiences.

• Innovation and Improvement: We are continuously seeking ways to improve our services and the experiences of our customers and team members.

• Earning Your Trust: We earn trust by communicating simply and transparently, treating people as individuals rather than as part of a corporation.

Essential Duties and Responsibilities:

The following is a list of essential duties and responsibilities that the employee will perform. This list is not exhaustive and may change as needed:

• Implement security best practices across CI/CD pipelines.

• Automate security scanning and testing to identify vulnerabilities early in development.

• Perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

• Work closely with development teams to ensure secure coding practices in Angular, React, NodeJS, and .NET applications.

• Configure and manage GitLab for secure version control.

• Implement security measures in Jenkins and Azure DevOps to ensure secure workflows.

• Utilize VS Code for secure coding and development.

• Manage security configurations and monitoring tools, including Grafana and Kibana.

• Ensure security compliance with JIRA project tracking and FIGMA design tools.

• Implement monitoring, alerting, and logging solutions for security incidents.

• Conduct regular security assessments and vulnerability scans.

• Stay updated on emerging security threats and proactively apply security measures.

• Provide guidance and training on security best practices to teams.

Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related technical field (or equivalent experience).

• Certified Ethical Hacker (CEH) or equivalent security certification required.

• At least five (5) years of experience in DevSecOps, security engineering, or a related cybersecurity role, with a focus on securing development pipelines.

• At least three (3) years of experience implementing and managing container security for Docker and Kubernetes.

• Hands-on experience with security tools for vulnerability scanning, static and dynamic code analysis, and penetration testing.

• Proficiency in Angular, React, NodeJS, and .NET programming.

• At least three (3) years of experience in scripting (PowerShell, Python, Bash, or YAML).

• At least three (3) years of experience with CI/CD tools like GitLab and Jenkins.

• Knowledge of security tools for monitoring and logging, including Grafana and Kibana.

• Familiarity with secure project tracking and design tools like JIRA and FIGMA.

• Experience in Infrastructure as Code (IaC) security with Terraform, Ansible, or AWS CloudFormation.

• Strong analytical and troubleshooting skills.

• Proven ability to communicate effectively with cross-functional teams.

Knowledge, Skills, and Abilities:

• Excellent organizational, multi-tasking, and prioritization skills.

• Ability to work independently and exercise sound judgment in various situations.

• Capable of meeting critical deadlines while collaborating effectively with others.

• Strong verbal and written communication skills.

Work Authorization

Applicants must be authorized to work in the US. Sponsorship is not available for this position.

Physical Requirements

The physical demands of this role include sitting, walking, and standing for extended periods. The ability to lift and move up to 25 pounds may be required. Vision capabilities include close vision, distance vision, color vision, peripheral vision, depth perception, and focus adjustment.

Work Environment

Work is performed in an office setting with exposure to computer screens, requiring frequent use of a computer, keyboard, mouse, and multi-line telephone system. This is a modern office environment.

Additional Information

Ziply Fiber requires that its employees maintain primary employment with the company. Employees are prohibited from holding outside employment or being self-employed without written approval from Ziply Fiber.

Diversity and Equal Opportunity

Ziply Fiber is an equal opportunity employer. We consider all qualified candidates regardless of race, color, religion, national origin, gender, age, marital status, sexual orientation, veteran status, disability, or any other legally protected status.

APPLY