Engineer

Key Responsibilities

• Design and develop custom security controls based on threat modelling outputs
• Build detective controls using Python-based frameworks and preventative controls using OPA/Rego policies
• Extend and enhance existing security control frameworks
• Develop and maintain automated unit tests and behavioral (BDD) test cases
• Integrate controls into CI/CD pipelines for continuous validation
• Collaborate with threat modeling teams, cloud architects, and security SMEs

Required Qualifications

• Minimum of 3-5 years of experience in DevSecOps engineering with a focus on cloud environments (AWS, GCP, Azure), ideally working within a security program
• Strong software engineering background with proficiency in software testing methodologies and tools
• Advanced proficiency in Python, with proficiency in Terraform for testing, automation, and custom tool development
• Proficiency with API integrations and backend development
• Experience writing scalable, maintainable code
• Hands-on experience with automated testing frameworks (Python) and CI/CD pipelines
• Experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure
• Experience with detection engineering: detection-as-code practices, developing and maintaining detection rules
• Hands-on experience with Open Policy Agency (OPA) for policy enforcement
• Proficiency in DevOps tools and practices
• Experience with SIEM query languages such as Splunk SPL, YARA rules, etc.
• Must pass Karat Assessment (Python focused)

Pay

$80,000 to $90,000 per year