DevSecOps Engineer - Health Software

Job Description

The DevSecOps engineer will be responsible for upholding and strengthening high DevOps and security standards at Apple Health Software, working on security-focused infrastructure and processes.

Requirements

• 5 years of experience with offensive security work, including security assessments, penetration tests, or red team engagements
• Experience with threat modeling
• Experience evaluating and implementing security tooling throughout the software development lifecycle
• Familiarity with a variety of services offered by public clouds like Amazon Web Services (AWS) and Google Cloud Platform (GCP)
• Familiarity with containerization technologies like Docker and Kubernetes
• Strong familiarity with high-level programming languages like Java and Python
• BS in Computer Science or equivalent

Responsibilities

• Building security-focused infrastructure and process automations, with a focus on shifting security left in the software development lifecycle
• Reviewing code (primarily Java and Python) for vulnerabilities, and guiding remediation efforts
• Leading security efforts in design reviews, and guiding the creation of a comprehensive threat modeling program
• Engaging with engineers and internal customers to answer questions, respond to concerns, and empower work organization-wide
• Contribute to vulnerability management efforts to help teams prioritize and remediate known vulnerabilities
• Joining DevOps on-call rotation to support infrastructure and customers
• Building an offensive security program and methodology to conduct security assessments, penetration tests, and red team engagements
• Leading security demonstrations, workshops, and exercises for software engineers to strengthen security awareness and secure software development