DevSecOps Python

Key Responsibilities

Security Automation & Engineering

* Develop, maintain, and optimize end to end automation solutions using Python to support security operations, vulnerability management, threat detection, and compliance activities.

* Build custom scripts, services, and automation pipelines tailored to cybersecurity use cases.

* Integrate automation with cloud environments, security tools, APIs, and data platforms.

DevSecOps Enablement

* Incorporate automated security checks into CI/CD pipelines (SAST, SCA, DAST, IaC scanning).

* Implement security guardrails and shift left practices to empower development teams.

* Collaborate with DevOps and platform engineering teams to ensure secure build and deployment processes.

Security Tooling & Customization

* Customize existing security platforms (e.g., SIEM, SOAR, vulnerability scanners) to meet internal requirements.

* Build connectors, enrichment pipelines, and orchestration workflows to improve security efficiency.

* Automate repetitive tasks across security operations and engineering environments.

Cybersecurity Collaboration

* Support incident response workflows by automating detection, triage, and containment mechanisms.

* Contribute to improving cybersecurity architecture through automation-driven designs.

* Assist in threat modeling and risk assessment initiatives.

______________

Required Qualifications

* 48 years of experience in software engineering, DevSecOps, security automation, or related fields.

* Strong expertise in Python (primary development language).

* Hands-on experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.

* Practical understanding of cybersecurity fundamentals: authentication, secure coding, encryption, network security.

* Experience automating or integrating with security tools (SIEM, SOAR, SCA/SAST, vulnerability scanners).

* Strong scripting and automation capabilities in Linux environments.

______________

Preferred Qualifications

* Experience with cloud security and IaC (Terraform, CloudFormation, ARM, etc.).

* Understanding of container technologies (Docker, Kubernetes).

* Familiarity with logging and monitoring frameworks (ELK, Splunk, SIEM systems).