Senior Security Engineer — Course Creator (Content Engineering)

Practical DevSecOps; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Practical DevSecOps is hiring a Senior Security Engineer — Course Creator to own courses end to end, including curriculum, labs, lab infrastructure, video lessons, exams, and grading rubrics. You will design and script lessons, build scalable lab environments, and craft evaluative challenges for security topics at the forefront of DevSecOps and cloud-native security.

You will research emerging technologies, translate findings into teachable scenarios, and maintain the catalogue as tools and CVEs

Qualifications

• 5+ years in application security, product security or DevSecOps roles.
• Hands-on depth in at least two areas: CI/CD security, container/Kubernetes security, IaC/CaC, AI/LLM security, API security, threat modeling, software supply chain security.

Responsibilities

• Build courses end-to-end: learning outcomes, module structure, lesson scripting, labs and assessments.
• Design lab exercises that require learners to build, break, and harden systems.
• Record and script video lessons; write guides, checklists and reference material.
• Design exam challenges and grading rubrics; support exam evaluation.
• Research emerging technologies and convert into teachable lab scenarios (AI security, Kubernetes, zero trust).
• Build and maintain lab infrastructure and internal tooling to scale content production.
• Support learners in forums and community channels; improve content from recurring questions.

Skills

App security

Docker

Git

CI/CD pipelines

Scripting (Python/Bash/Go)

Technical writing

Independent work

Tools

Terraform

Ansible

Inspec

Job description

Senior Security Engineer — Course Creator (Content Engineering) at Practical DevSecOps

Location: Hyderabad (preferred, hybrid) — remote considered for exceptional candidates

About the role

We are hiring a Course Creator to design and build that content. This is a builder's role: you will own courses end to end — curriculum, labs, lab infrastructure, video lessons, exam challenges and grading rubrics — for topics at the front edge of DevSecOps, AI security and cloud-native security.

If you have ever finished a security course and thought "I could have taught this better, and with real labs," this is that job.

What you will do

Build courses

• Own new and existing courses end to end: learning outcomes, module structure, lesson scripting, hands‑on labs and assessments.
• Design lab exercises that force learners to do the work — build the pipeline, break the model, harden the cluster — not watch someone else do it.
• Record and script video lessons, write technical guides, checklists and reference material.
• Design exam challenges and the grading rubrics that go with them, and support exam evaluation.

Research and stay ahead

• Research emerging technologies and turn them into teachable lab scenarios — AI/LLM security, MCP servers and agentic AI, supply chain security, Kubernetes, zero trust.
• Attack and defend AI models, inference endpoints and MCP servers; translate those findings into lessons.
• Keep the existing catalogue current as tools, CVEs and frameworks move (OWASP LLM Top 10, MITRE ATLAS, SLSA, CIS benchmarks, ASVS).

Build the platform around the content

• Build and maintain the lab infrastructure so learners can focus on the skill, not the setup.
• Build internal tooling that shortens the time from idea to shipped lesson.
• Look for ways to scale and streamline how content gets produced and reviewed.

Support learners

• Be a visible, responsive presence in support forums and the Mattermost community.
• Turn recurring learner questions into better content.

What we are looking for

Must have

• 5+ years in application security, product security or DevSecOps roles.
• Strong hands‑on depth in at least two of: CI/CD security (SCA, SAST, DAST, secrets), container and Kubernetes security, IaC/CaC (Terraform, Ansible, Inspec), AI/LLM security, API security, threat modeling, software supply chain security.
• Working fluency with Docker, Git, and at least one CI system (GitLab CI, Jenkins, GitHub Actions, CircleCI).
• Scripting and automation in Python, Bash or Go — enough to build labs, not just run tools.
• Genuinely good technical writing. You can explain a hard concept to a mid‑level engineer in plain English and make them want to try it.
• Ability to work independently in a distributed team with minimal supervision.
  

Nice to have

• Prior experience creating training content, courseware, workshops or conference trainings.
• A public body of work: blog, CTF challenges, open-source tooling, conference talks (Black Hat, OWASP AppSec, BSides, DevSecCon), CVEs.
• Experience with LLM tooling and frameworks (LangChain/LangGraph, vector stores, agent frameworks) from a security perspective.
• Video production or screencast experience.

What we are not looking for

• Someone who has only run scanners and triaged tickets.
• Someone who needs a full spec before starting.
• Apple/Mac stack (MBP, Keynote).
• Highly competitive compensation.
• Flexible work schedule; hybrid from our Hyderabad office, or fully remote for the right person.
• Free access to every Practical DevSecOps certification, plus a budget for conferences and training.
• Time explicitly allocated for research — staying current is the job, not something you do after hours.
• Your work is seen and used by thousands of security professionals worldwide.