DevSecOps Engineer

Why Cadre5?

• Working with highly talented team members
• 3 weeks’ vacation
• Excellent medical insurance, including employer-paid benefits

Job Responsibilities:

• Translate complex technical concepts to better communicate with scientific, admin, and management staff.

• Help shape the AmSC security architectural vision.

• Lead teams to evaluate novel scientific and AI capabilities against our core security values.

• Develop and maintain security applications deployed with container orchestration tools.

• Automate policy assessments to verify cyber security and operational policy.

• Define and implement best practices and standards within the organization.

• Analyze, triage, and respond to application, system, and network events.

• Install, maintain, and monitor common security systems such as (N/H)IDS and SIEM.

• Interpret cyber security policy, recommend enhancements to current policies, and lead subsequent implementation efforts.

• Respond to system vulnerabilities and coordinate system patches and updates. Perform approved penetration testing and verification.

• Document cyber security procedures.

• Work with and Secure cloud infrastructure and container native applications.

• Follow, contribute to, and implement evolving AI safety and security standards.

• Collaborate with partners to understand and synthesize diverse security, operation, governance, and technical requirements.

• Participate in a 24-hour, 7-day on-call incident response rotation.

Basic Qualifications:

• Bachelor's Degree in Computer Science or related field.

• Equivalent combination of education and experience will be considered.

• Experience securing cloud infrastructure in one or more clouds (e.g. AWS)

• Experience with security tools as part of CI/CD pipelines (e.g. Trivy, SonarQube)

• Experience with container security tools (e.g. container capabilities, Gatekeeper, Neuvector)

• The ability to obtain and maintain a Department of Energy "Q" clearance is required. This requires US Citizenship.

Preferred Qualifications:

• Master's Degree in Computer Science or related field and 1-2 years of relevant experience.

• Strong understanding of cyber security concepts, best practices, and tools.

• Experience deploying and maintaining systems in UNIX/Linux environments.

• Solid understanding of networked computing environment concepts.

• A DevSecOps mindset, including version control and scripting/programming experience.

• Ability to communicate effectively and work well in a team environment.

• Natural ability to understand and use new and emerging technologies.

• Experience with security tools such as NIDS/HIDS, Vulnerability Scanning, and SIEM.

• Experience in a high-performance computing environment.

• Experience with incident response and engaging in forensics.

• Experience with automated configuration management tools such as Puppet, Ansible, Terraform, etc.

• Experience in network, application, and/or security architecture and design.

• Familiarity with common protocols such as: DNS, DHCP, LDAP, SNMP, SMTP, HTTP, SSL, etc, and features of cloud networking (e.g. VPCs)

• Experience in cloud infrastructure and cloud security.

• Familiarity with major cloud providers, including platform native technologies.

• Familiarity with container workflows, development practices, and secure operations.

• Familiarity with AI development including evolving AI safety and security standards.

• Familiarity with software supply chain requirements including, provenance & attestations, and SBOMs.