DevSecOps Engineer

About the role

Be Part of the Next. Be Berkadia. Berkadia is built on deep expertise, strong relationships, and a commitment to excellence across the commercial real estate industry. What sets us apart is our people. As a values-driven organization, we foster a culture where collaboration thrives, growth is encouraged, and employees are empowered to make an impact. Together, our people strengthen our business and help shape the future of Berkadia. Are you ready to be part of the next? Discover your next opportunity at Berkadia and apply today. DevSecOps Engineers play a crucial role in the Information Security team by researching, developing, and supporting the deployment of security solutions to uphold secure coding standards. They are responsible for monitoring and resolving coding and open-source vulnerabilities, ensuring robust protection throughout the software development lifecycle.

Responsibilities

• Conduct complex, high-skill work with minimal supervision, exercising independent judgment.
• Assist teams with security inquiries related to the DevSecOps lifecycle.
• Maintain and optimize the security of CI/CD pipelines, automating secure code scanning processes.
• Secure enterprise applications on cloud platforms, focusing on automation, security, and reliability.
• Maintain and enhance automation for security tasks in application development, design, and debugging.
• Assist teams in addressing known vulnerabilities and mitigating associated risks.
• Collaborate with innovation managers on security aspects of CI/CD troubleshooting, automation, and configuration management.
• Identify and verify risks, assigning ownership and assisting in remediation efforts.
• Communicate effectively with both technology and business stakeholders.
• Collaborate and coordinate with peers and team members, actively participating in career development.
• Take accountability for work assignments and responsibilities.
• Set and adhere to clear timelines for project completion.
• Work collaboratively within a cross-functional, matrixed team environment.
• Demonstrate curiosity and eagerness to learn, exploring new technologies and ideas to enhance company performance.
• Other duties as assigned.

Preferred Qualifications

• Strong software development knowledge in programming languages such as NodeJS, Python, TypeScript, etc.
• Experience in developing and securing software solutions, with a strong understanding of DevOps/DevSecOps principles.
• Proficiency in building secure and efficient CI/CD pipelines, with a full end-to-end security assessment capability.
• Expertise in both Static and Dynamic Application Security Testing methodologies and tools, along with best practices for enterprise-scale continuous delivery.
• Comprehensive understanding of security concepts, threat modeling, risk assessment techniques, and cloud-native technologies, including platforms like Azure, AWS, and Kubernetes.

Benefits

• Monthly paid volunteer hours and donation matching to benefit our communities
• Employee Resource Groups that help you grow with us
• Fertility and family planning services
• Up to 12-weeks of fully paid parental leave
• Mental health care, including free counseling sessions
• We'll help you fund your learning journey with generous tuition reimbursement
• Pet insurance discounts
• And more!