DevSecOps Engineer

Dev Sec Ops  Engineer at Blanclabs.

About the role Blanclabs is seeking a talented Dev Sec Ops  Engineer to join our dynamic team in Toronto, Ontario. In this role, you will be instrumental in integrating security practices within the Dev Ops process, ensuring that our software development lifecycle is both efficient and secure. You will collaborate closely with development, operations, and security teams to implement best practices and tools that enhance our security posture while maintaining high levels of productivity.

This position offers an exciting opportunity to work in a fast-paced environment where innovation and security are paramount.

Location:

Toronto, Ontario

Engagement:
Full-Time Employee (FTE)

Salary:
Competitive salary commensurate with experience

Visa:
Open to candidates requiring visa sponsorship

• Collaborate with cross-functional teams to embed security into the software development lifecycle, ensuring that security is a fundamental aspect of our Dev Ops practices.
• Design and implement automated security testing tools and processes to identify vulnerabilities early in the development process.
• Develop and maintain CI/CD pipelines that incorporate security checks and balances, ensuring that all code is thoroughly vetted before deployment.
• Monitor and analyze security incidents and vulnerabilities, providing timely responses and remediation strategies to mitigate risks.
• Conduct regular security assessments, including penetration testing and vulnerability scanning, to identify and address potential weaknesses in our systems.
• Create and maintain documentation related to security policies, procedures, and best practices to ensure compliance with industry standards and regulations.
• Provide training and guidance to development and operations teams on secure coding practices and security awareness.
• Stay up-to-date with the latest security trends, tools, and technologies, and recommend improvements to our security framework as necessary.
• Collaborate with the incident response team to investigate security breaches and develop strategies to prevent future occurrences.
• Participate in code reviews to ensure adherence to security best practices and identify potential security flaws.
• Assist in the development of disaster recovery and business continuity plans to ensure the resilience of our systems.
• Engage with external security partners and vendors to evaluate and implement new security solutions that align with our business objectives.

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
• A minimum of 3 years of experience in Dev Sec Ops , Dev Ops, or a related engineering role.
• Strong understanding of security principles, practices, and tools, with experience in implementing security controls in CI/CD pipelines.
• Proficiency in scripting and automation languages such as Python, Bash, or Power Shell.
• Experience with cloud platforms (AWS, Azure, or Google Cloud) and their security features.
• Familiarity with containerization technologies (Docker, Kubernetes) and their security implications.
• Knowledge of security frameworks and compliance standards (e.g., OWASP, NIST, ISO 27001).
• Excellent problem-solving skills and the ability to work independently as well as part of a team.
• Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.

• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or AWS Certified Security Specialty.
• Experience with Infrastructure as Code (IaC) tools such as Terraform or Cloud Formation.
• Familiarity with security information and event management (SIEM) tools.
• Previous experience in a startup or fast-paced environment.

• Proficient in using Dev Ops tools such as Jenkins, Git, and Ansible for automation and orchestration.
• Experience with security tools like Snyk, Aqua Security, or similar for vulnerability management.
• Knowledge of network security concepts and tools, including firewalls, intrusion detection systems, and VPNs.
• Familiarity with Agile methodologies and project management tools like Jira or Trello.

• This position is based in Toronto, Ontario, and may require occasional on-site presence.
• The role may involve participation in on-call rotations for incident response.
• Candidates must be legally authorized to work in Canada and may require visa sponsorship.