Cybersecurity Developer/Automation Engineer

Job Overview

Key Responsibilities

• Design, develop, and maintain secure software within the software development life cycle (SDLC)
• Ensure industry-standard coding practices are followed while automating cybersecurity workflows
• Manage code through Agile development methodologies
• Integrate developed solutions into existing Continuous Integration / Continuous Delivery (CI/CD) methodologies
• Implement automated CI/CD tests including unit, end-to-end, use case, and misuse cases
• Translate customer requirements into optimized code
• Develop system interconnects via API, including data exchange via XML and JSON
• Stay current with the latest cybersecurity trends and best practices in software development

Qualifications

1. Minimum of three years of experience as a developer with a strong focus on cybersecurity
2. Minimum of two years of experience in a fully automated CI/CD environment using security tests to enforce security requirements
3. Experience with designing and implementing automated CI/CD tests including unit, end-to-end, use case and misuse cases
4. Proficiency in Python and JavaScript
5. Proficiency in Splunk’s Search Processing Language and Kusto Query Language
6. Strong problem-solving skills and ability to quickly translate customer requirements into optimized code
7. Proficiency with cybersecurity aspects of networking, operating systems, databases, and cloud infrastructure
8. Experience developing system interconnects via API, including data exchange via XML and JSON

Required Skills

• Strong understanding of software development methodologies and cybersecurity principles
• Excellent communication and collaboration abilities
• Ability to work in an Agile development environment
• Familiarity with version control systems (e.g., Git)
• Knowledge of secure coding practices and common vulnerabilities (e.g., OWASP Top 10)
• Experience with cloud platforms (e.g., AWS, Azure, or GCP)

Preferred Skills

• Experience with containerization technologies (e.g., Docker, Kubernetes)
• Familiarity with infrastructure as code (e.g., Terraform, Ansible)
• Knowledge of compliance frameworks (e.g., NIST, ISO 27001)
• Experience with security information and event management (SIEM) systems