Description

Design, build, and operate scalable security automation that aligns with DCMS controls across cloud native, GenAI, and infrastructure as code environments. This role is hybrid.

Responsibilities

• Translate security requirements into machine-enforced guardrails and application-level controls to prevent risks early in the development process.
• Develop full stack applications using Java and React to operationalize threat modeling, control validation, and audit evidence generation.
• Embed security expertise into automation at the source, ensuring audit-ready evidence that regulators and reviewers can trust.
• Collaborate with engineering teams to integrate threat modeling and control validation directly into developer workflows.
• Design API-driven, microservices-based architectures and integrate with CI/CD pipelines and security telemetry systems.

Required Skills

• Deep understanding of application security, cloud security architecture, and threat modeling techniques.
• Strong experience in full stack Java development, including Java (Spring Boot, REST APIs, microservices architecture) and React (modern JavaScript/TypeScript).
• Proficiency in building automation using Python, Go, and/or Java, with hands-on experience automating security controls in cloud and containerized environments.
• Experience translating threat modeling into automated capabilities such as attack path identification, abuse case modeling, and risk scoring.
• 10+ years of working experience in software engineering.
• Any Graduate education level.

Key Skills

Education

Any Graduate