Sr. DevSecOps Engineer

<p>Kaseya® is the leading provider of complete IT infrastructure and security management solutions for Managed Service Providers (MSPs) and internal IT organizations worldwide powered by AI. Kaseya’s best-in-breed technologies allow organizations to efficiently manage and secure IT to drive sustained business success. Kaseya has achieved sustained, strong double-digit growth over the past several years and is backed by Insight Venture Partners <a href="https://www.insightpartners.com/">www.insightpartners.com</a>), a leading global private equity firm investing in high-growth technology and software companies that drive transformative change in the industries they serve.</p> <p>Founded in 2000, Kaseya currently serves customers in over 20 countries across a wide variety of industries and manages over 15 million endpoints worldwide. To learn more about our company and our award-winning solutions, go to <a href="https://www.kaseya.com/">www.Kaseya.com</a> and for more information on Kaseya’s culture.</p> <p>Kaseya is not your typical company. We are not afraid to tell you exactly who we are and our expectations. The thousands of people that succeed at Kaseya are prepared to go above and beyond for the betterment of our customers.</p><p><strong>DevSecOps Engineer Job Description</strong></p> <p>Kaseya is seeking a DevSecOps engineer to execute security initiatives across the enterprise. This person is a technical contributor who will build and maintain infrastructure focused security solutions. This individual will be responsible for planning, coordinating, and executing initiatives that improve the security posture of Kaseya. To fulfil the job requirements, maintaining relationships between other departments is a must, including Information Security and Software Engineering.</p> <p>An ideal candidate for this role is a DevSecOps Engineer with a passion for security. This person must have effective communication and project management skills. An ideal candidate would also need the ability to work autonomously and have a mind and motivation for continuous improvement.</p> <p>The individual will work on a wide variety of interesting technical problems, operate at scale in an environment with over an exabyte of data, have opportunities to green field solutions, and operate with both autonomy and empowerment from senior leadership.</p> <p><strong>Roles and Responsibilities </strong></p> <ul> <li>Security Testing and Analysis: performs regular security testing and analysis to identify vulnerabilities in the software development process. This includes conducting code reviews, penetration testing, and vulnerability scanning.</li> <li>Secure Infrastructure: ensures that the infrastructure used by the development team is secure. This includes configuring secure servers, monitoring security logs, and ensuring that security protocols are followed.</li> <li>Security Compliance: ensures that the development process adheres to security compliance standards, such as PCI-DSS, HIPAA, and GDPR.</li> <li>Security Automation: automates security processes, such as vulnerability scanning and code analysis, to ensure that security is integrated into the development process from the beginning.</li> <li>Security Education and Training: provides education and training to the development team to ensure that they are aware of security best practices and can implement them in their work.</li> <li>Incident Response: responds to security incidents, such as data breaches or cyber-attacks, by investigating and remedying the issue.</li> <li>Risk Assessment: performs risk assessments to identify potential security threats and develops mitigation strategies to reduce the risk of security breaches.</li> <li>Collaboration: works closely with the development team, operations team, and security team to ensure that security is integrated throughout the deployment process.</li> </ul> <p><br/><strong>Knowledge &amp; Experience</strong></p> <ul> <li>Familiar with cloud platforms such as AWS, Azure DevOps, OpenStack and GCP. Understand how to secure cloud resources and how to integrate security into cloud-based applications.</li> <li>Experience with provisioning and automation using tools like Terraform, CloudFormation, Ansible, Puppet and OpenStack.</li> <li>Familiar with Continuous Integration/Continuous Deployment (CI/CD) Tools like AzureDevOps, Jenkins, CircleCI, GitLab, Travis CI.</li> <li>Experience with Security tools and concepts used in all processes from SDLC to pipeline deployment. Technologies include SAST, DAST, Linting, Secret Scanning, Pipeline job templating, repo management.</li> <li>Familiar with Source Code Management (SCM) tools like AzureDevOps, Bitbucket, GitHub, GitLab. Understand how to configure these tools to automate the testing and deployment of code while integrating security measures.</li> <li>Familiar with containerization technologies including Docker, PodMan, OpenShift and Kubernetes.</li> <li>Experience with infrastructu