100% Remote || Dev SecOps Engineer || USC/GC

Title:                   Dev SecOps Engineer
Location:          100% Remote
Duration:         6+ Months
MOI:                     Phone then Video

Visa: USC/GC

· 8 or more Years of IT Experience

3+ years’ experience with Security testing
3+ years managing and monitoring Linux systems
3+ years’ experience with supporting highly scalable applications
3+ years’ experience working with Cloud systems in AWS/GCP
1+ years of programming experience with Python, NodeJS, Java, or Go

Role Details:
As part of the DevSecOps Team, you’ll be working to reduce risk across Paramount+. We partner with the SRE, engineering, and product teams during each point of the software development lifecycle (SDLC) and help drive broader security initiatives across Paramount+

Your Day-to-Day:

Work with security, infrastructure, and development teams to ensure our systems are minimizing risk and following best practices
Assist with improving application security, reliability and scalability
Validate application and infrastructure security, and stability
Improve upon and further integrate the Secure Development Lifecycle (SDLC) into product design and engineering efforts
Work with SRE and DevSecOps teams to diagnose issues and develop improvements
Prepare and Validate the infrastructure for large events
Respond to security incidents and develop remediation plans

Key Projects:

Work closely with the SRE team minimize risk
Work with our development teams on re-architecture of existing systems in the cloud
Work with the AI/ML teams to detect patterns and build self-monitoring systems
Monitor application projects and raise potential issues to relevant stakeholders
Create and maintain best practices for secure and well tested applications

Basic Qualifications:

Bachelor's degree or equivalent experience
3+ years’ experience with Security testing
3+ years managing and monitoring Linux systems
3+ years’ experience with SDLC
Attention to detail and ability to manage multiple projects
Demonstrated ability to work with 3rd parties and collaborate on solutions

Additional Qualifications:

Bachelor's degree in a quantitative discipline
3+ years’ experience with secure SDLC and Threat Modeling
3+ years experience with supporting highly scalable applications
3+ years’ experience working with Cloud systems in AWS/GCP
3+ years’ experience working with Docker
1+ years of programming experience with Python, NodeJS, Java, or Go
1+ years’ experience with CSPM tools like wiz.io
1+ years’ experience with SAST and SCA tools like snyk.io or SonarQube
1+ years’ experience with WAF tools like Signal Science, AWS WAF or GCP Cloud Armor
1+ years’ experience with API Protection tools like Akamai or ApigeeX
1+ years’ experience with CNAPP tools like sysdig or lacework
1+ years’ experience with SIEM tools like Elasticsearch or sumologic
1+ years’ experience with Kubernetes