Senior DevSecOps Engineer (Python)
$70- $78/hour
Apply (opens in a new tab)Senior DevSecOps Engineer (Python)
Posted 2 days ago
SENIORITY
Senior
SALARY
$70- $78/hour
About the role
- What Candidates Will Do: Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.
- Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
- Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.
- With candidates’ development background and security knowledge, provide secure stable platform for enforcing application security controls.
- Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.
- Work with client’s partners to implement, manage, and optimize security measures within client’s GitHub repositories to continuously improve code integrity and protect against vulnerabilities.
- Required skillset:
- 5 plus years software development experience using Pythono
- Working with APIs, including but not limited to ReSToUnit testing frameworks
- Multi-process and multi-thread architecture
- 5 plus years in linux, strong bash scripting skills.
- Deep understanding of CI CD pipelines
- Working knowledge of windows environment, simple scripting dos-batch etc.
- Bachelor’s degree with 10+ years of work experience in the IT field
- Ability to process large datasets for reporting and analysis.
- Desired Skillset: A self-starter, with a strong desire for learning new technologies and applying them to solve problems
- Knowledge of SAST, OSS technologies
- Ability to perform Python code reviews with minimal assistance
- Expertise in monitoring, alerting, reporting, data analysis is desired.
- Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc.
- DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus
- Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
