Security Controls Engineer

Job Description

This is a development-heavy role. Candidates must demonstrate strong coding capability.

Security Experience Is Required, But Coding Proficiency Is Mandatory.

• Design and develop custom security controls based on threat modelling outputs
• Build detective controls using Python-based frameworks
• Build preventative controls using OPA/Rego policies
• Extend and enhance existing security control frameworks
• Develop and maintain automated unit tests
• Develop and maintain behavioral (BDD) test cases
• Integrate controls into CI/CD pipelines for continuous validation
• Collaborate with threat modeling teams, cloud architects, and security SMEs

• Minimum of 3-5 years of experience in Dev Sec Ops  engineering with a focus on cloud environments (AWS, GCP, Azure) within a security program
• Strong software engineering background – proficiency in software testing methodologies and tools
• Advanced proficiency in Python and Terraform for testing, automation and custom tool development
• Proficiency with API integrations and backend development
• Write scalable, maintainable code
• Hands‑on experience with automated testing frameworks (Python)
• Hands‑on experience with CI/CD pipelines
• Experience with cloud‑native development and architecture, leveraging specific services and tools for AWS, GCP, and Azure
• Experience with detection engineering: detection‑as‑code practices and maintaining detection rules
• Hands‑on experience with Open Policy Agency (OPA) for policy enforcement
• Proficiency in Dev Ops tools and practices
• Experience with SIEM query languages such as Splunk SPL and YARA rules
• MUST pass Karat Assessment (Python focused)

Salary Range: $100,000 to $150,000 per year

Qualifications:

BACHELOR OF COMPUTER SCIENCE