Senior DevSecOps Engineer bei Beyond Finance
Beyond Finance · Chicago, Vereinigte Staaten Von Amerika · Hybrid
- Senior
- Optionales Büro in Chicago
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused on compliance and ethics, supportive user-centric technology, and customized financial solutions, we've helped over 700,000 clients on their path to a brighter future.
While we're proud of what we've already accomplished, we're searching for new collaborators to help us get to the next level! If you're looking to join a forward-thinking, rapidly growing organization with helping people as its number one goal, we want to hear from you.
Location: 222 N La Salle St, Suite 1600, Chicago, IL 60601
Job Description: Focus on application security and bridge the gap between development, security, and operations. Automate deployments, integrate security best practices into the development lifecycle, and ensure the overall health and security of applications. Develop, implement, and maintain robust CI/CD pipelines for Ruby applications for web and mobile apps. Write and maintain automated tests (unit, integration, and security) to ensure application quality and security. Work collaboratively with developers to integrate security considerations throughout the software development lifecycle (SDLC). Identify and remediate security vulnerabilities in applications using SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) tools. Ensure Dependency (CodeQL) scanning and secrets scanning are detected, triaged and remediated. Implement and maintain security controls within the application infrastructure. Monitor application health and performance and identify potential issues proactively. Stay up-to-date on the latest DevSecOps tools and technologies related to Ruby and application security. Participate in security code reviews and identify potential security flaws. Collaborate with the security team to develop and implement security policies and procedures. Work is performed in company’s office Chicago with some remote work permitted per company policy. Standard company benefits offered.
Education Requirement: Bachelor’s degree in computer engineering, computer science, information technology, or closely related
Experience Requirement: 5 years of experience in DevSecOps engineer or software engineer
Special Skills: Must have work experience with each of the following: 1) DevOps and performance engineering within cloud environments in credit and financial industries, including AWS cloud infrastructure (VPCs, IAM, CloudFormation, Terraform), security tools (GuardDuty, Security Hub, CloudWatch), and vulnerability management; (2) Automating infrastructure provisioning and maintaining CI/CD pipelines including use of tools such as Jenkins, Gitlab, Github Enterprise, and Circle CI, and incorporating security measures into the development lifecycle; (3) Static Application Security Testing (SAST) tools such as CodeQL and Checkmarx for detecting code vulnerabilities early in SDLC and Use of DAST tools to identify runtime vulnerabilities in web applications; (4) Regulatory compliance standards and best practices (e.g., GDPR, OWASP Top Ten, etc.) and how they apply to application security.
Salary: $144,000-$174,000
Apply: Send resume to [email protected] with “Senior DevSecOps Engineer” in subject line.
#LI-DNI
The base annual salary range is listed below. This role is eligible for additional incentives, including an annual bonus.
Why Join Us?
While you make a difference for others, we’ll work to make a difference for you, providing an uplifting, collaborative work environment and benefits that reflect your value to us. For eligible full-time employees, we offer:
- Considerable employer contributions for health, dental, and vision programs
- Generous PTO, paid holidays, and paid parental leave
- 401(k) matching program
- Merit advancement opportunities
- Career development & training
And finally, our team spirit and culture! We cultivate an environment of community, connection, and belonging across our entire organization.
Beyond Finance does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job positions. No fee will be paid to their parties who submit unsolicited candidates directly to Beyond Finance employees or the Beyond Finance HR team. No placement fee will be paid to any third party unless such a request has been made by the Beyond HR team.
