Dev Sec Ops Engineer

At Deckers Brands, Together, Every Step is a promise kept that every employee can bring their authentic self, is valued and supported, as a whole person, at work and beyond. Together, Every Step is how we continue to deliver exceptional business results, experience an amazing place to work, and have a positive impact on the communities and world around us. 

Job Title: DevSecOps Engineer

Reports to: Senior Manager Security Engineering

Location: Remote

Interested applicants must reside in one of the following approved states: Arizona, California, Colorado, Indiana, Massachusetts, Minnesota, New York, Oregon, Pennsylvania, Texas, Utah, Washington

The Role

Security as Code. Deckers Brands is looking for a talented engineer to join our Information Security Team. This role is for a unique personality that thrives on deploying and maintaining cyber security technologies, as they relate to code development. This individual will also assist in threat hunting, incident response, and your more “typical” security functions. Information Security Team members work closely with application development, operations groups, and business stakeholders across Deckers Brands to ensure that solutions are implemented and maintained in a manner that preserves the confidentiality, integrity and availability of our data. 

Security by design. This individual will be a critical resource for enabling the juncture of security and development to find mutual success. You will be the guiding voice that keeps our code aligned with security best practices and compliant with various global government and industry regulations.

We celebrate diversity--of your background, your experiences and your unique identity. We are committed to ensuring an inclusive and equitable workplace where all of our employees can Come as They Are. We believe that when we bring our different perspectives to work, we are truly Better Together.

Your Impact

The primary functions of this role, include but are not limited to:

• Perform penetration tests on internal and external code to ensure Deckers’ desired security posture is maintained
• Assist with the development, deployment, and maintenance of static and dynamic code analysis tools
• Perform security impact assessment on code releases to ensure the appropriate security controls are in place for the level of risk the code represents
• Work with global teams to audit and monitor software development lifecycle standards to confirm they are properly defined and maintained
• Work with development teams to tune Web Application Firewalls and DDOS solutions
• Provide “follow the sun” support for escalated Information Security-related requests and incidents, as well as participate …