Devsecops Engineer

**Qualifications**:Hands-on experience with a majority of the following technologies, along with a willingness to become proficient in the remaining areas:- Windows and Linux Servers, VMware, Active Directory- Cloud platforms, preferably with Azure- Secrets management with Consul and Vault or similar systems- Certificate management, encryption, and security best practices- Penetration testing and vulnerability scanning- Configuration management tools like Salt and Terraform- Firewalls and load balancers such as F5- Web servers, including IIS and NGINX- Database Server Infrastructure like Microsoft SQL Server and PostgreSQL- Application Performance Monitoring with tools like New Relic- Infrastructure monitoring with tools like Sensu, SolarWinds, Nagios, or Azure App Insights- CI/CD tools like TeamCity, Octopus Deploy, Concourse, Azure DevOps, or GitHub Actions- Log Aggregation tools like SumoLogic or Splunk- Network theory and protocols such as DNS, DHCP, proxy servers, and firewalls- Security operations with tools for SAST, DAST, RAST, and WAF- Risk analysis for tools and processes- Incident response and management- Automation of security controlsProficiency, high-comfort, and familiarity with:- One or more programming or scripting languages (Python, PowerShell, BASH)- Command line tools such as (git, netcat, npm, terraform, etc.)- Information Security frameworks and standards (NIST)**Certifications**:Additional consideration given for one or more of the following certifications:- Certified Web Application Pen Tester (CWAPT)- Certified Computer Hacker Forensic Investigator (CHFI)- Certified Information Systems Security Professional (CISSP)- Certified Secure Software Lifecycle Professional (CSSLP)- Certified Software Test Engineer (QAI CSTE)- We are an equal opportunity employer_