DevSecOps Engineer Full Time

Summary:

• Kaseya® is a leading provider of complete IT infrastructure and security management solutions for Managed Service Providers (MSPs) and internal IT organizations worldwide.
• The company serves customers in over 20 countries, managing over 15 million endpoints worldwide.
• Kaseya focuses on delivering groundbreaking solutions that empower businesses to thrive in the digital age.
• The DevSecOps Engineer role is responsible for designing, building, and executing DevSecOps strategies to improve Kaseya’s security posture.
• This role includes promoting a cybersecurity culture, mentoring engineers, and ensuring security best practices are integrated into the SDLC.

Responsibilities:

• Define Security Standards: Develop and enforce security best practices, guidelines, and frameworks throughout the DevOps pipeline.
• Secure Development Lifecycle (SDLC): Integrate security principles into each SDLC phase via tools, code reviews, and best practices.
• Threat Modeling and Risk Assessment: Identify potential threats to applications/infrastructure and mitigate risks early in development.
• CI/CD Pipeline Security: Integrate security testing (SAST, DAST, vulnerability scanning) into CI/CD pipelines for real-time vulnerability detection.
• Infrastructure as Code (IaC) Security: Implement secure configurations of cloud infrastructure and monitor for configuration drift.
• Automated Compliance: Automate continuous compliance checks to meet regulatory requirements like GDPR, HIPAA, or PCI-DSS.
• Educate and Train: Conduct training sessions to foster a security-first culture.
• Stakeholder Collaboration: Work with engineering, product, and business teams to align security with organizational goals.
• Mentorship and Leadership: Mentor junior security and DevOps engineers on secure coding practices and DevSecOps principles.
• Evaluate and Implement Security Tools: Assess and implement security tools for scanning, monitoring, and vulnerability management.
• Optimize DevSecOps Toolchain: Optimize tools for performance, security, and scalability while ensuring workflow compatibility.
• Configuration Management and Version Control: Securely manage system configurations and minimize misconfigurations.

Requirements:

• Prior experience as a DevSecOps Engineer.
• Technical expertise in DevSecOps practices with Linux, Kubernetes, Docker, Jenkins, and cloud platforms (AWS, Azure).
• Advanced skills in Python, Bash, and infrastructure-as-code tools (e.g., Terraform).
• Experience with security tools such as vulnerability scanners (Snyk, WIZ, GitHub advanced security) and SIEM solutions.
• Strong understanding of modern security vulnerabilities and SDLC best practices.
• Proficient in Linux and Windows operating systems.
• Experience scripting and automating mechanisms in the SDLC.
• Ability to implement security mechanisms in complex enterprise environments.
• Strong written and verbal communication skills with a focus on documentation.
• Effective under pressure in fast-paced environments with strong work ethic and desire to learn.
• Ability to identify larger trends requiring broader solutions.
• Thrives in team-based environments and champions security best practices.

Benefits:

• Kaseya offers equal employment opportunities regardless of race, religion, age, ancestry, gender, sex, sexual orientation, national origin, disability, veteran status, or other protected characteristics.
• Join a dynamic, fast-growing company with opportunities for career growth.
• Be part of a team that values grit, accountability, and boldness.