Description

About Team:
UKG is seeking a talented DevSecOps Engineer to join our internal Global Security Research & Architecture team chartered to identify application security vulnerabilities within the UKG product lines. The goal of this team is to develop and implement automation solutions to support Secure Software Development Lifecycle practices. This role will require a strong technical background and expertise in software development and security, as well as experience with automation tools and frameworks.

About You:
This is a rare opportunity for the right DevSecOps Engineer to join UKG’s award winning team. You will be working alongside some of the best in the business. If you are qualified and want to join our top-rated team, apply online today.

Primary/Essential Duties and Key Responsibilities:
• Ensure that all tools supporting the security of the Software Development Lifecycle (SDLC) are performing optimally (e.g. SAST, SCA, DAST, MAST, etc.)
• Develop and maintain automated solutions/scripts to support the security of the SDLC
• Stay up to date with the latest security threats, vulnerabilities, and DevSecOps industry trends.
• Collaborate with development teams to ensure that security is built into every stage of the software development lifecycle.
• Create and maintain documentation for security processes, procedures, and guidelines.
• Work with cross-functional teams to provide education and guidance about internally developed and external tools supporting the Secure Software Development Lifecycle
• Participate in security audits and assessments
• Maintain awareness of security issues amongst development community
• Continuously improve Secure Software Development Life Cycle (S-SDLC) processes and environments
• Provide expertise in Continuous Integration and Deployment platforms

Qualifications

Basic Qualifications:
• Must have a bachelor's degree in computer science, software engineering or related fields
• 8+ years of experience in software development and security
• 3+ years of Python development experience, Golang is desirable but not required
• Fluent in scripting languages (Bash, JavaScript, etc...)
• Working experience with Docker and Kubernetes
• Familiarity with CI/CD tools and processes
• Familiarity with OWASP Top 10 and Vulnerability Management
• Working experience with Software Composition Analysis (SCA) tools
• Working experience with Static Application Security Testing (SAST) tools

Preferred Qualifications:
• Familiarity with cloud platforms and infrastructure – Google Cloud Platform preferred
• Experience with code repository management platforms - GitHub, BitBucket, GitLab
• Must be a team player with great interpersonal skills
#LI-Hybrid

Company Overview

Here at UKG, our purpose is people™. Our HR, payroll, and workforce management solutions help organizations unlock happier outcomes for all. And our U Krewers, who build those solutions and support our business, are talented, collaborative, and innovative problem-solvers. We strive to create a culture of belonging and an employee experience that empowers our people – both at work and at home. Our benefits show that we care about the whole you, from adoption and surrogacy assistance to tuition reimbursement and wellness programs. Our employee resource groups provide a welcoming place to land, learn, and connect with those who share your passions and interests. What are you waiting for? Learn more at www.ukg.com/careers  #WeAreUKG 

EEO Statement

Disability Accommodation

For individuals with disabilities that need additional assistance at any point in the application and interview process, please email UKGCareers@ukg.com.