DevSecOps Engineer

Job Description

What You’ll Do

A DevSecOps Engineer integrates and support security at every phase of the software development lifecycle (SDLC) throughout the pipeline. As a DevSecOps Engineer, your role involves integrating security practices into the DevOps pipeline. You’ll automate security testing, vulnerability scanning, and compliance checks, collaborate with development and operations teams, and stay informed about security best practices and emerging threats.

Who You’ll Work With

The Application Security team is an integral part of Teradata Information Security and closely partners and guides Product Engineering. Application Security team works with several teams such as CloudOps, DevOps and our Engineering teams.

What Makes You a Qualified Candidate

• Knowledge of core application security principles, common security vulnerability classes, their root causes, and mitigations.
• MS/BS degree in Electrical Engineering, Computer Science, Information Technology, or related field. Advanced degree highly preferred.

Proficient in 1 or more of any of the following areas:

• Implement and maintain security tooling in CI/CD pipelines and throughout the software development lifecycle.
• Develop and manage security infrastructure, tools, and processes.
• Manage container security solutions for technologies like Docker and Kubernetes.
• Serve as the security subject matter expert for Application Security tool integrations.
• Integrate SAST, SCA, DAST, IaC, and Container scanning into CI/CD pipelines.
• Identify and automate security processes and practices.
• Evaluate new technologies impacting Application Security.
• Make informed security decisions.
• Understand DevSecOps principles and practices.
• Automate tasks using Python, Bash, or Go.

What You’ll Bring

Knowledgeable in 1 or more of any of the following areas:

• Strong technical expertise in DevSecOps toolkits.
• Knowledge of DevOps Automation (Terraform, GitHub Actions).
• Familiarity with cloud environments (AWS, Azure, Google Cloud).
• Proficiency in Infrastructure as Code (IaC) languages.
• Understanding of HTTP, SSL/TLS protocols, and Web applications.
• Knowledge of CI/CD processes and tools.