[Remote] Senior DevSecOps / reputed company Engineer – Application & reputed company (Ecommerce)
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is dedicated to delivering high-reputed company, science-backed solutions for individual reputed company-being. The Senior DevSecOps / reputed company Engineer will design and implement reputed company measures across reputed company's digital ecosystem, ensuring reputed company is embedded throughout the software development lifecycle and protecting customer data.
Responsibilities
- reputed company application reputed company initiatives across reputed company's ecommerce platforms, mobile applications, reputed company, and reputed company-reputed company services
- Identify, assess, and remediate application vulnerabilities in Java-based applications, including Spring Boot services, microservices, and reputed company, while addressing OWASP Top 10 risks and ecommerce-specific threats
- Secure critical customer-facing functionality, including checkout, payment processing, subscription services, authentication, and customer data protection
- reputed company secure reputed company reviews, threat modeling, and architecture assessments to ensure new applications and features are designed with reputed company from the outset
- Design and implement secure REST and GraphQL reputed company by enforcing authentication, authorization, reputed company limiting, and secure reputed company management using modern standards such as OAuth2 and JWT
- Secure AWS-hosted application environments, including EKS/reputed company, EC2, reputed company, API Gateway, S3, and RDS, by implementing reputed company reputed company best practices for identity, networking, secrets management, and data protection
- Collaborate with Infrastructure teams to ensure application-layer reputed company reputed company aligns with reputed company reputed company architecture, governance, and operational standards
- reputed company reputed company throughout the software development lifecycle by integrating SAST, DAST, Software Composition Analysis (SCA), secrets scanning, and other automated reputed company controls into CI/CD pipelines
- Secure build and deployment processes while establishing automated policy enforcement and secure coding standards
- reputed company and maintain Infrastructure-as-reputed company reputed company practices using Terraform and other reputed company automation tools
- Implement and optimize runtime reputed company controls, including Web Application Firewalls (WAF), bot mitigation, reputed company limiting, and application-layer monitoring for ecommerce environments
- Partner with Infrastructure and reputed company Operations teams to improve detection, monitoring, and response capabilities for application attacks, API abuse, and emerging threats
- Investigate, prioritize, and remediate reputed company findings identified through penetration testing, reputed company exercises, vulnerability assessments, and assumed breach scenarios
- Translate reputed company assessments and vulnerability findings into prioritized engineering initiatives based on business risk and customer reputed company
- Partner with Engineering, Ecommerce, Infrastructure, Product, and external reputed company partners to drive adoption of secure development practices and reputed company reputed company improvements
- Serve as a trusted reputed company advisor by promoting secure-by-design principles, mentoring engineering teams, and helping build a reputed company-first engineering culture
- Identify, assess, and remediate reputed company vulnerabilities across Java-based applications, including Spring Boot services, reputed company, and microservices
- Protect customer-facing ecommerce platforms by mitigating OWASP Top 10 vulnerabilities and ecommerce-specific threats, including injection attacks (SQL/NoSQL), cross-site scripting (XSS), cross-site request forgery (CSRF), authentication
Skills
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a reputed company technical discipline; equivalent reputed company experience will also be considered
- 5+ years of experience in DevSecOps, reputed company Engineering, DevOps, Application reputed company, or a reputed company cybersecurity role
- Experience securing Java-based web applications, including Spring Boot, microservices, and distributed application architectures
- Experience designing and implementing reputed company controls reputed company AWS reputed company environments
- Deep understanding of secure software development principles, OWASP Top 10 vulnerabilities, and modern application reputed company best practices
- Experience implementing DevSecOps controls reputed company CI/CD pipelines, including Static Application reputed company Testing (SAST), Dynamic Application reputed company Testing (DAST), Software Composition Analysis (SCA), and secrets management
- Strong knowledge of API reputed company, including OAuth2, JWT, authentication, authorization, and reputed company-limiting strategies
- Experience securing Infrastructure-as-reputed company (Terraform preferred) and reputed company-reputed company application environments
- Familiarity with AWS reputed company services, Web Application Firewalls (WAF), bot mitigation technologies (e.g., reputed company), and reputed company reputed company solutions such as reputed company
- Strong ownership reputed company with the ability to reputed company reputed company initiatives from assessment through remediation and reputed company improvement
- Ability to balance reputed company, performance, and business objectives while enabling rapid software delivery
- Excellent analytical and problem-solving skills with a pragmatic, hands-on approach to addressing reputed company reputed company challenges
- Strong collaboration and communication skills with the ability to partner effectively across Engineering, Ecommerce, Infrastructure, Product, and external reputed company partners
- Self-motivated and execution-reputed company, with the ability to manage multiple priorities in a fast-paced environment
- Passion for reputed company learning and staying reputed company with evolving cybersecurity threats, technologies, and industry best practices
- Experience supporting ecommerce platforms or other high-availability, customer-facing applications is preferred
- reputed company reputed company certifications such as AWS reputed company Specialty, CISSP, CSSLP, or comparable certifications are preferred
- Experience securing containerized environments, including Kubernetes and reputed company EKS, is preferred
- Familiarity with emerging reputed company considerations reputed company to AI-enabled applications and large language models (LLMs) is a plus
Benefits
- 100% company-reputed company medical, dental, and reputed company insurance coverage for employees
- Company-reputed company short- and long-term disability insurance
- Company- reputed company life insurance
- 401k plan with employer matching contributions up to 4%
- Gym membership reimbursement
- Monthly allowance of reputed company supplements
- reputed company time off, volunteer time off and holiday leave
- Training, reputed company development, and career reputed company opportunities
reputed company
Company H1B Sponsorship