Job description

Role:- DevSecops Security Engineer with Python Location:- New York, NY (Hybrid 3 days onsite, 2 days remote) Job Description: What Candidates Will Do: • Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications. • Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes. • Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages. • With candidates’ development background and security knowledge, provide secure stable platform for enforcing application security controls. • Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform. • Work with client’s partners to implement, manage, and optimize security measures within client’s GitHub repositories to continuously improve code integrity and protect against vulnerabilities. Required skillset: • Must have: 5 plus years software development experience using PythonoWorking with APIs, including but not limited to ReSToUnit testing frameworks • Multi-process and multi-thread architecture • Must have: 5 plus years in linux, strong bash scripting skills. • Deep understanding of CI CD pipelines • Working knowledge of windows environment, simple scripting dos-batch etc. • Bachelor’s degree with 10+ years of work experience in the IT field • Ability to process large datasets for reporting and analysis.Desired Skillset: • A self-starter, with a strong desire for learning new technologies and applying them to solve problems • Knowledge of SAST, OSS technologies • Ability to perform Python code reviews with minimal assistance • Expertise in monitoring, alerting, reporting, data analysis is desired. • Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc. • DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus • Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus Note: Pay Range: $70- $78/hour on W2 The specific compensation for this position will be determined by a number of factors, including the scope, complexity and location of the role as well as the cost of labor in the market; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits including medical, dental, vision and 401K contributions as well as any other PTO, sick leave, and other benefits mandated by appliable state or localities where you reside or work.

Requirements

Must-haves

Role:- DevSecops Security Engineer with Python
Location:- New York, NY (Hybrid 3 days onsite, 2 days remote)
Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.
Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.
With candidates’ development background and security knowledge, provide secure stable platform for enforcing application security controls.
Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.
Work with client’s partners to implement, manage, and optimize security measures within client’s GitHub repositories to continuously improve code integrity and protect against vulnerabilities.
Must have: 5 plus years software development experience using PythonoWorking with APIs, including but not limited to ReSToUnit testing frameworks
Multi-process and multi-thread architecture
Must have: 5 plus years in linux, strong bash scripting skills.
Deep understanding of CI CD pipelines
Working knowledge of windows environment, simple scripting dos-batch etc.
Bachelor’s degree with 10+ years of work experience in the IT field
Ability to process large datasets for reporting and analysis.Desired Skillset:
A self-starter, with a strong desire for learning new technologies and applying them to solve problems
Knowledge of SAST, OSS technologies
Ability to perform Python code reviews with minimal assistance
Expertise in monitoring, alerting, reporting, data analysis is desired.
Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc.

Nice-to-haves

DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus
Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonci/cdjavareactkubernetesdocker

Platform: bullhorn
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto