Description

\u003cp\u003e\u003cstrong\u003eCompany Information\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cspan data-olk-copy-source="MessageBody"\u003eAEG brings music, sports, and live entertainment together to create moments people remember around the world. Each year, more than 100 million fans experience live events across five continents-from global touring, concerts, and festivals to iconic sports and entertainment destinations.\u003c/span\u003e\u003c/p\u003e\n\u003cp\u003eThrough our music division, AEG Presents, one of the world's leading operators of tours, concerts, and music festivals, we help shape the sound of now. We work with artists at every stage of their careers to bring live music to life, connecting artists with fans on stages around the world.\u003c/p\u003e\n\u003cp\u003eHeadquartered in Los Angeles, AEG Presents is driven by creativity, innovation, and purpose, and powered by people who want their work to show up in the real world.\u003c/p\u003e\n\u003cp\u003eIf you're ready to help create moments that matter, there's a place for you here. Because it happens here.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eJob Summary\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003eThe Development Security Operations (DevSecOps) Engineer is a technical role responsible for implementing and maintaining secure software development practices across the organization. Working closely with development, operations, and security teams, this position helps ensure that software delivery processes and environments align with industry best practices while maintaining operational efficiency and strong security controls. The DevSecOps Engineer supports the integration of security throughout the software development lifecycle, assists in identifying and mitigating security risks, and contributes to the continuous improvement of security automation, monitoring, and compliance capabilities.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eEssential Functions\u003c/strong\u003e\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplement and maintain secure software development practices across the organization by:\n\u003cul\u003e\n\u003cli\u003ePerforming code reviews and collaborate with development teams to address security vulnerabilities and implement secure coding practices.\u003c/li\u003e\n\u003cli\u003eProviding guidance and support to development teams in implementing secure coding practices and integrating security into the development lifecycle.\u003c/li\u003e\n\u003cli\u003eWork to provide security efforts with DevOps team to secure infrastructure and ensure secure deployment and operation of applications.\u003c/li\u003e\n\u003cli\u003eWork with cross-functional teams to define security requirements, standards, and guidelines for software development projects.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eEnhance and monitor the tools used within the development and operations process.\u0026nbsp; This includes:\n\u003cul\u003e\n\u003cli\u003eReviewing and enhancing CI/CD pipelines using Github Actions, Azure DevOps, AWS Code pipeline, and Jenkins.\u003c/li\u003e\n\u003cli\u003eUtilizing tools like Orca Security, Sysdig, Codacy and Azure Log Analytics to monitor and analyze system logs and application code for security vulnerabilities.\u003c/li\u003e\n\u003cli\u003eStaying up to date with the latest security trends, vulnerabilities, and industry best practices, and ensure their integration into our software development processes.\u003c/li\u003e\n\u003cli\u003eSecure Image and Artifact Management: Protect container images, build artifacts, and other software packages used in the CI/CD pipeline. Scan these artifacts for vulnerabilities before deploying them and utilize secure registries for storage and distribution.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eWork on the implementation as well as help maintain a security program.\u0026nbsp; This includes:\n\u003cul\u003e\n\u003cli\u003eConducting Risk Assessments using frameworks like the OWASP top 10\u003c/li\u003e\n\u003cli\u003eDeveloping a Risk Treatment Plan\u003c/li\u003e\n\u003cli\u003eDetermining and create needed information Security Policies\u003c/li\u003e\n\u003cli\u003eDetermining and create needed information Security Objectives\u003c/li\u003e\n\u003cli\u003eMaintain and help develop Security Reports\u003c/li\u003e\n\u003cli\u003eHelp implement Security Controls within each dev group\u003c/li\u003e\n\u003cli\u003eManage vendor relations\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eWork with internal and external team in working on audits, incident response, and/or compliance processes.\u003c/li\u003e\n\u003cli\u003eWork to define requirements and processes for Disaster Recovery (DR) and Business Continuity.\u0026nbsp; After requirements and processes are determined and approved, assist in the facilitation of a DR test.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eRequired Qualifications\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u0026nbsp;\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBA/BS Degree (4- year)\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv data-olk-copy-source="MailCompose"\u003e2-5 years of related work experience\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eHave experience managing vendor relationships and running an implementation from start to finish.\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eHas been a team lead or managed a team of security professionals.\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience with a unified, real-time monitoring and analytics platform, such as Azure Log Analytics, Google Cloud Operations (Stackdriver), AWS CloudWatch, Sentry, Splunk or Datadog\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience in at least one programming language (JavaScript, Ruby, Python, PHP, C#)\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience with cloud environment such as AWS, Azure, and/or Google Cloud Platform\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience using a CI/CD tool like Github Actions, CircleCI, Jenkins, Azure DevOps, or AWS CodePipeline\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience with apply frameworks in the Software Development Lifecycle like OWASP top 10, NIST, etc\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eExperience configuring infrastructure and application alerts, alarms, and notifications.\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eProven experience as a DevSecOps Engineer, Software Security engineer, Security Engineer, or in a similar role\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eEagerness to work in a highly collaborative team environment\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eKnowledge of secure software development lifecycle (SSDLC) practices and secure coding principles\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eStrong analytical, decision-making, interpersonal, and conflict resolution skills\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eGreat verbal and written communication skills\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eResults driven with reliable follow through\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eComfortable using Git version control.\u003c/div\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cdiv\u003eFamiliarity with industry security standards and frameworks such as OWASP top 10, NIST, ISO 27001, or CIS benchmarks\u003c/div\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u0026nbsp;\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003ePayscale: $80,509-\u0026nbsp;$128,000\u003c/strong\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eBonus: \u003c/strong\u003e\u003cem\u003eThis position is not eligible for a bonus under the current bonus plan requirements.\u003c/em\u003e\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eBenefits:\u003c/strong\u003e\u003cem\u003e\u003cstrong\u003e Full-time: \u003c/strong\u003eWe offer a comprehensive benefits package that includes: medical, dental and vision insurance, paid holidays, vacation and sick time, company paid basic life insurance, voluntary life insurance, parental leave, 401k Plan (with a current employer match of 3%), flexible spending and health savings account options, and wellness offerings.\u003c/em\u003e\u003c/p\u003e\n\u003cp\u003eAEG reserves the right to change or modify the employee's job description whether orally or in writing, at any time during the employment relationship.\u0026nbsp; AEG may require an employee to perform duties outside their normal description.\u003c/p\u003e\n\u003cp\u003eAEG's policy is to hire the most qualified applicants, and we comply with all applicable federal, state and local employment laws in making hiring and employee decisions. \u0026nbsp;We are an equal opportunity employer and do not discriminate against applicants or employees on the basis of race, color, marital status, disability, religion, age, sex, sexual orientation, national origin, genetic information, veteran status, or any other legally protected status recognized by applicable federal, state or local law.\u003c/p\u003e\n\u003cp\u003e\u003cstrong\u003eEmployer does not offer work visa sponsorship for this position.\u003c/strong\u003e\u003c/p\u003e