Security Engineer – Platform & Tooling

About the Role

Key Responsibilities

• Build and maintain security automation platforms that support Security Operations and Engineering teams.
• Integrate SAST, DAST, SCA, and IaC security controls into CI/CD pipelines.
• Develop automated workflows for vulnerability management, findings triage, and remediation tracking.
• Design and manage telemetry ingestion pipelines for SIEM, XDR, and security analytics platforms.
• Create and maintain reusable security artifacts, including Nuclei templates, Sigma rules, and testing frameworks.
• Automate deployment and management of cloud-based security labs, sandboxes, and testing environments.
• Implement Infrastructure-as-Code (Terraform, CloudFormation, Ansible) to enable scalable and secure infrastructure deployments.
• Secure containerized and cloud-native environments running on Docker, Kubernetes, AWS, and Azure.
• Monitor platform health, reliability, and performance through automation, SLIs/SLOs, and self-healing mechanisms.
• Collaborate with Security, DevOps, and Engineering teams to embed security throughout the software development lifecycle.
• Produce security metrics, dashboards, and reporting to improve visibility and risk management.
• Develop technical documentation and self-service tooling to enhance operational efficiency and user adoption.

Required Qualifications

• Strong proficiency in Python or Go, with experience developing automation, integrations, and security tooling.
• Hands-on experience implementing DevSecOps practices and integrating security controls into CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
• Strong understanding of application security testing, including SAST, DAST, and vulnerability management using tools such as OWASP ZAP, Semgrep, Nuclei, or equivalent.
• Experience securing and deploying cloud-native workloads using Docker, Kubernetes, and AWS and/or Azure.
• Experience with Infrastructure-as-Code and automation frameworks such as Terraform, CloudFormation, or Ansible.
• Proven ability to collaborate effectively with both software engineering and security operations teams to deliver scalable security solutions.
• Experience using AI tools and Large Language Models (LLMs) to enhance security engineering, DevSecOps, and software development workflows.
• Ability to identify and implement AI-driven automation opportunities to improve efficiency, reduce manual effort, and enhance security operations.
• Understanding of secure and responsible AI adoption, including security, privacy, and governance considerations.

Preferred Qualifications

• Experience implementing OWASP DSOMM.
• GIAC Cloud Security Automation (GCSA) certification.
• HashiCorp Certified: Terraform Associate.
• Certified Kubernetes Administrator (CKA).
• DevOps or DevSecOps certifications such as DSOE, CDP, or equivalent.