Description

You will design and develop custom security controls, building detective solutions with Python and preventative policies using OPA/Rego. You extend existing security frameworks and integrate controls into CI/CD pipelines for continuous validation. You collaborate with threat modeling teams, cloud architects, and security SMEs to enhance detection engineering and policy enforcement.

This role is hybrid.

Responsibilities

• Build detective controls using Python-based frameworks and preventative controls using OPA/Rego policies.
• Develop and maintain automated unit tests and behavioral (BDD) test cases for security controls.
• Integrate security controls into CI/CD pipelines to ensure continuous validation and compliance.
• Implement detection-as-code practices, including writing and maintaining detection rules and SIEM queries.
• Collaborate with threat modeling teams and cloud architects to design scalable, secure cloud architectures.

Required Skills

• 3-5+ years of experience in DevSecOps engineering with a focus on cloud environments (AWS, GCP, Azure).
• Advanced proficiency in Python for testing, automation, custom tool development, and backend development.
• Hands-on experience with Open Policy Agency (OPA) for policy enforcement and management.
• Proficiency in Terraform for infrastructure as code and automation tasks.
• Experience with CI/CD pipelines and automated testing frameworks in Python.
• Knowledge of SIEM query languages, including Splunk SPL and YARA rules.
• Strong software engineering background with proficiency in software testing methodologies.
• Ability to pass a Karat Assessment focused on Python coding.

Preferred Skills

• Experience with detection engineering and detection-as-code practices.
• Background in cloud-native development and architecture.

Key Skills

Education

Any Graduate