DevSecOps Engineer

Security and Risk Management San José, San José Canton


About Splunk

Join us as we pursue our innovative new vision to make machine data accessible, usable and valuable to everyone. Splunk is a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. At Splunk, we’re committed to our work, customers, having fun and most meaningfully, to each other’s success. Learn more about Splunk careers and how you can become a part of our journey!

We are looking for a smart, passionate, and experienced DevSecOps Engineer with a broad range of experience working in dynamic enterprise environments. Do you want to utilize your hard-won offensive security experience to drive security posture improvements across our organization? As a DevSecOps Engineer, you will do that and more!

About The Role

The DevSecOps Engineer reports to the Manager of DevSecOps. This role will be responsible for performing penetration testing, red team assessments, and adversary emulation. The ideal candidate will have previous experience in the following areas: network, web application, and cloud-centric penetration testing. Ability to influence change across functions and apply critical thinking skills are key success factors. Exceptional technical, communication and negotiation skills are necessary for this role, as you will need to provide technical guidance to peers, perform sophisticated technical assessments, translate highly technical concepts into business impact and make remediation recommendations.

Responsibilities:

  • Develop and implement a secure DevOps process that integrates security into the development process
  • Work with development teams to find solutions for automating remediation.
  • Perform security testing and analysis to identify potential risks and weaknesses in our infrastructure
  • Continuously improve and maintain our security posture through risk assessments, security audits, and incident response planning
  • Ensure compliance with relevant regulations and standards, such as PCI-DSS and GDPR
  • Stay up-to-date with the latest security threats, and recommend proactive measures to mitigate potential risks

Qualifications:

  • Bachelor's degree in Computer Science, Information Security, or related field
  • Strong understanding of DevSecOps processes and tools.
  • Experience with security testing tools, such as Nessus, Burp Suite, or Metasploit
  • Knowledge of cloud infrastructure, such as AWS, GCP andAzure
  • Experience with containerization and orchestration tools
  • Ability to work independently and as part of a team

If you're passionate about security, and want to work in a fast-paced, dynamic environment, we encourage you to apply for this opening. We offer competitive compensation and benefits packages, as well as opportunities for career growth and development.

We value diversity at our company. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying.

For job positions in San Francisco, CA, and other locations where required, we will consider for employment qualified applicants with arrest and conviction records.

This is a test line.