Insight Global is looking for a fully remote DevSecOps engineer to sit fully remote and be able to work east coast hours starting at 7 AM. This candidate will be helping build out an effective automation pipeline and support the application team with new tools integration. An ideal candidate is self-motivated and needs minimum supervision to deliver his projects. The candidate will be building pipelines for integrating security tools in CI/CD (Azure and Github Action), publishing artifacts and performing manual code review verifying false positives from automated scanning, and writing requirements/test cases to perform a proof of concept to pick a new set of tools (for SAST, IAST, IAC, API, Secret, Container etc.). There will be times he/she will have to act as a leader to ensure the correct processes are in place and educate others to ensure results are produced for the organization. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal. com. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: . Must Have -7+ years of Application Security experience in order to support the changes of the current environment and understand vulnerability scanning -7+ years of Application Security experience in order to support the changes of the current environment -Perform CI/CD /Manual Scans including SAST, DAST, Infra-As-A-Code, API, Secret, Contain scanning etc. -Coding experience with bash, powershell, python, YAML to implement and build pipelines-Excellent communication skills to explain security vulnerabilities/remediation to others not as familiar with security - Able to distribute to stakeholders and managing liabilities-Great leadership skill to lead DevSecOps program from the security team's side and to collaborate with the IT teams to define DevSecOps processes.
