You will own the design and implementation of automated workflows for cybersecurity processes.
Responsibilities
- Translate business and security processes into automated workflows, APIs, and services, producing low-level designs and sequence diagrams.
- Develop event-driven and scheduled automation for IAM lifecycle, PAM operations, compliance checks, and SOAR playbooks.
- Integrate services with enterprise tools including IAM (Okta/SailPoint), PAM (CyberArk), and SIEM/SOAR platforms (Splunk, Sentinel, Cortex XSOAR).
- Own the end-to-end SDLC, including coding, unit/integration testing, peer reviews, and deployment pipelines.
- Implement secure coding practices (OAuth2/OIDC, SAML, JWT, TLS) and ensure service observability using structured logging and metrics.
Required Skills
- 6-10 years of software development experience with recent, hands-on work in Python and Java for backend services.
- Strong expertise in Python using FastAPI/Flask, async IO, and task runners like Celery/RQ.
- Proficiency in Java using Spring Boot and Spring Security, including REST/gRPC development.
- Proven experience automating cybersecurity processes, such as IAM lifecycle and vulnerability management workflows.
- Experience integrating with message queues/event buses (Kafka/RabbitMQ) and implementing REST/gRPC communication.
- Working knowledge of containerization (Docker, Kubernetes) and CI/CD tooling (Jenkins, GitHub Actions).
- Solid understanding of security protocols: OAuth2/OIDC, SAML, TLS, and secrets management (Vault/KMS).
- Experience with infrastructure as code (Terraform) and cloud deployment patterns.