Key Responsibilities
Security Automation & Engineering
- Develop, maintain, and optimize end to end automation solutions using Python to support security operations, vulnerability management, threat detection, and compliance activities.
- Build custom scripts, services, and automation pipelines tailored to cybersecurity use cases.
- Integrate automation with cloud environments, security tools, APIs, and data platforms.
DevSecOps Enablement
- Incorporate automated security checks into CI/CD pipelines (SAST, SCA, DAST, IaC scanning).
- Implement security guardrails and shift left practices to empower development teams.
- Collaborate with DevOps and platform engineering teams to ensure secure build and deployment processes.
Security Tooling & Customization
- Customize existing security platforms (e.g., SIEM, SOAR, vulnerability scanners) to meet internal requirements.
- Build connectors, enrichment pipelines, and orchestration workflows to improve security efficiency.
- Automate repetitive tasks across security operations and engineering environments.
Cybersecurity Collaboration
- Support incident response workflows by automating detection, triage, and containment mechanisms.
- Contribute to improving cybersecurity architecture through automation-driven designs.
- Assist in threat modeling and risk assessment initiatives.
______________
Required Qualifications
- 48 years of experience in software engineering, DevSecOps, security automation, or related fields.
- Strong expertise in Python (primary development language).
- Hands-on experience with CI/CD tools such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
- Practical understanding of cybersecurity fundamentals: authentication, secure coding, encryption, network security.
- Experience automating or integrating with security tools (SIEM, SOAR, SCA/SAST, vulnerability scanners).
- Strong scripting and automation capabilities in Linux environments.
______________
Preferred Qualifications
- Experience with cloud security and IaC (Terraform, CloudFormation, ARM, etc.).
- Understanding of container technologies (Docker, Kubernetes).
- Familiarity with logging and monitoring frameworks (ELK, Splunk, SIEM systems).
