-7+ years of Application Security experience in order to support the changes of the current environment and understand vulnerability scanning
-7+ years of Application Security experience in order to support the changes of the current environment
-Perform manual Scans including SAST, DAST, Infra-As-A-Code, API, Secret, Contain Image scanning etc.
-Coding experience (python, java, c#)
-Excellent communication skills to explain security vulnerabilities/remediation to others not as familiar with security
-Great leadership skill to lead DevSecOps program from the security team's side and to collaborate with the IT teams to define DevSecOps processes.
Insight Global is looking for a fully remote DevSecOps engineer to sit fully remote and be able to work east coast hours starting at 7 AM. This candidate will be helping build out an effective automation pipeline and support the application team with new tools integration. Day to day the ideal candidate will be writing scripts for integrating security tools in CI/CD (Azure and Github Action), verifying false positives from automated scanning (tenable), and writing requirements/test cases to perform a proof of concept to pick a new set of tools (for SAST, IAST, IAC, API, Secret, Container etc.). There will be times he/she will have to act as a leader to ensure the correct processes are in place and educate others to ensure results are produced for the organization.
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.