New

DevSecOps Specialist (REMOTE)

EnerSys
life insurance, vision insurance, paid time off, paid holidays, 401(k)
United States, Pennsylvania, Pittsburgh
811 Parkway View Drive (Show on map)
Nov 23, 2024
EnerSys is the global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products. What We're Offering Paid time off plus paid holidays Medical/dental/vision insurance plan Life insurance, short/longterm disability, tuitionreimbursement, flex spending, and employee stock purchase plan 401K plan Culture: We value and strive for excellence in all that we do through innovative technology by creating long lasting relationships with our stakeholders, co-workers, and customers. We continentally strive to foster teamwork, engagement and enhance our employee's skills and competence by providing appropriate training. Compensation Range:$91,600-$123,000 Compensation may vary based on applicant's work experience, education level, skill set, and/or location. Job Purpose The DevSecOps Specialist is responsible for embedding security practices into our DevOps processes, ensuring that security is a primary focus throughout the software development lifecycle. This role will involve close collaboration with development, operations, and security teams to drive a security-first mindset and ensure the protection of our applications, infrastructure, and products. Essential Duties and Responsibilities * Implement the organization's security strategy within the DevOps pipeline, ensuring alignment with overall business objectives. * Act as a liaison between the Information Security team and DevOps teams, ensuring that security considerations are embedded into every stage of the software development and deployment process. * Assist in the development and execution of incident response plans, focusing on quick detection, mitigation, and resolution of security incidents. * Ensure that all DevSecOps practices meet regulatory and compliance requirements (e.g., GDPR, HIPAA, PCI-DSS) * Develop and deliver cybersecurity training programs for DevOps teams to promote awareness and adherence to best practices. * Evaluate, deploy, and manage security tools and technologies that integrate with the DevOps pipeline, such as SAST, DAST, and container security tools. * Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses. * Stay up to date on regulatory developments and industry trends. * Expected to travel up to 10% each year. * Perform other duties as assigned. Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Must be a U.S. citizen or U.S. Permanent Resident ("Green Card holders") with an active passport. Education and/or Experience A degree in a technical field (Computer Science, Information Systems, or Cybersecurity) is preferred but not required. Proven experience in securing DevOps environments, integrating security practices into DevOps pipelines and automating security processes required. Strong experience with cloud platforms (e.g., AWS, Azure, GCP) and securing cloud-native applications. Strong understanding of cybersecurity principles, risk management frameworks, and compliance standards (e.g., SOX, NIST CSF, ISO 27001, SOC-2, HIPAA, GDPR). Experience with threat modeling, penetration testing, and secure software development practices. Excellent communication and interpersonal skills: Oral, written and listening. Strong analytical and problem-solving abilities. Ability to work independently and collaboratively in a cross-functional environment. Relevant IT certification (e.g., CDP, CISSP, CEH) other relevant certifications is preferred. Reasoning Ability * Problem management / resolution skills; project management skills; generally accepted security principles. * Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis. TRAVEL REQUIRED: Up to 10% PHYSICAL DEMANDS: This position will work in an office setting, expect minimal physical demands. General Job Requirements Generic EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. EEO/Minority/Female/Vets/Disabled Know Your Rights Know Your Rights (Spanish) EEO is the Law Supplement Pay Transparency Nondiscrimination