Security Automation Engineer

Posted 54ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Security Automation Engineer ensuring effective security practices in software development for arts organizations. Collaborating on CI/CD pipelines and developing security automation at Tessitura.

Responsibilities:

  • Implement and maintain secure CI/CD pipelines using Bitbucket Pipelines, AWS CodePipeline, and other automation tools
  • Develop secure “paved roads” including preconfigured Terraform modules, container images, and pipeline templates
  • Update the paved roads as security requirements and capabilities evolve
  • Contribute security requirements and standards to the Engineering Foundations
  • Create and maintain guardrails that enable developers to move quickly while automatically enforcing security standards
  • Build and maintain security scanning automation as part of CI/CD pipelines, including vulnerability scanning, static code analysis, and dependency checking
  • Build and maintain Security-as-a-Service offerings for internal use, e.g.: Reusable security tools and libraries
  • Build and maintain log ingestion pipelines and services to collect security-relevant data
  • Embed into software engineering project teams as an assigned security representative.

Requirements:

  • A Bachelor’s degree in a field related to computer science, cyber security, or information technology—or recent equivalent experience
  • One to three years of experience in a DevOps, software engineering, cyber security, or application security role
  • Experience securing CI/CD pipelines and working with infrastructure-as-code tools
  • Understanding of AWS security services and infrastructure management
  • Working knowledge of application security testing approaches (e.g. SAST, DAST, SCA)
  • Working knowledge of Git version control and branching strategies
  • Familiarity with shift-left and developer-centric approaches to application security
  • Experience building or maintaining log ingestion pipelines, including configuring their data inputs and setting up log forwarding
  • A high level of comfort both working independently and being embedded into cross-functional or project teams
  • An effective approach to communicating and partnering with developers that results in practical security outcomes
  • Eagerness to learn new technologies and adapt to new security challenges
  • The legal right to work in the United States.

Benefits:

  • various medical, dental, and vision plans
  • life and AD&D insurance
  • disability insurance
  • employee assistance programs
  • 401(k) retirement plan with employer match
  • generous paid time off including vacation and sick leave
  • 12 weeks of paid parental leave
  • 7-week sabbatical after seven years of service
  • recharge week between Christmas and New Year’s