Senior Security Engineer — Course Creator (Content Engineering)

Practical DevSecOps; India; Hybrid; INR 4,000,000 - 6,500,000; Full time

Job summary

Practical DevSecOps is seeking a Senior Security Engineer — Course Creator to own end-to-end course development, labs, and assessments in the DevSecOps space. You will design and script labs, record lessons, and craft exam rubrics while staying ahead on AI, cloud-native and security trends.

You will build the platform around content, maintain lab infra and internal tools, and actively engage learners in forums to improve material and outcomes.

Qualifications

• 5+ years in application security, product security or DevSecOps roles.
• Hands-on depth in at least two areas: CI/CD security, container/Kubernetes security, IaC/CaC, AI/LLM security, API security, threat modeling or software supply chain security.
• Working fluency with Docker, Git, and at least one CI system (GitLab CI, Jenkins, GitHub Actions, CircleCI).
• Scripting in Python, Bash or Go to build labs.
• Genuinely good technical writing and ability to explain complex concepts clearly.
• Ability to work independently in a distributed team.

Responsibilities

• Build courses end to end: outcomes, modules, lesson scripting, labs and assessments.
• Design lab exercises to require learners to perform tasks—build pipelines, harden clusters, verify labs.
• Record and script video lessons; write guides, checklists and reference materials.
• Design exam challenges and grading rubrics; support evaluation.
• Research emerging tech and convert into teachable lab scenarios (AI security, Kubernetes, zero trust).
• Keep content current as tools and frameworks evolve (OWASP LLM Top 10, MITRE ATLAS, CIS).
• Build and maintain lab infrastructure and internal tooling to accelerate content delivery.
• Support learners in forums and communities; turn questions into better content.

Skills

App security

CI/CD security

Container security

Kubernetes security

IaC/CaC

AI/LLM security

API security

Threat modeling

Software supply chain security

Docker

Git

CI tooling

Python scripting

Bash scripting

Go scripting

Technical writing

Tools

CI/CD tooling

Job description

Senior Security Engineer — Course Creator (Content Engineering) at Practical DevSecOps

About the role

We are hiring a Course Creator to design and build that content. This is a builder's role: you will own courses end to end — curriculum, labs, lab infrastructure, video lessons, exam challenges and grading rubrics — for topics at the front edge of DevSecOps, AI security and cloud-native security.

If you have ever finished a security course and thought \"I could have taught this better, and with real labs,\" this is that job.

What you will do

Build courses

• Own new and existing courses end to end: learning outcomes, module structure, lesson scripting, hands‑on labs and assessments.


• Design lab exercises that force learners to do the work — build the pipeline, break the model, harden the cluster — not watch someone else do it.


• Record and script video lessons, write technical guides, checklists and reference material.


• Design exam challenges and the grading rubrics that go with them, and support exam evaluation.

Research and stay ahead

• Research emerging technologies and turn them into teachable lab scenarios — AI/LLM security, MCP servers and agentic AI, supply chain security, Kubernetes, zero trust.


• Attack and defend AI models, inference endpoints and MCP servers; translate those findings into lessons.


• Keep the existing catalogue current as tools, CVEs and frameworks move (OWASP LLM Top 10, MITRE ATLAS, SLSA, CIS benchmarks, ASVS).

Build the platform around the content

• Build and maintain the lab infrastructure so learners can focus on the skill, not the setup.


• Build internal tooling that shortens the time from idea to shipped lesson.


• Look for ways to scale and streamline how content gets produced and reviewed.

Support learners

• Be a visible, responsive presence in support forums and the Mattermost community.


• Turn recurring learner questions into better content.

What we are looking for

Must have

• 5+ years in application security, product security or DevSecOps roles.


• Strong hands‑on depth in at least two of: CI/CD security (SCA, SAST, DAST, secrets), container and Kubernetes security, IaC/CaC (Terraform, Ansible, Inspec), AI/LLM security, API security, threat modeling, software supply chain security.


• Working fluency with Docker, Git, and at least one CI system (GitLab CI, Jenkins, GitHub Actions, CircleCI).


• Scripting and automation in Python, Bash or Go — enough to build labs, not just run tools.


• Genuinely good technical writing. You can explain a hard concept to a mid‑level engineer in plain English and make them want to try it.


• Ability to work independently in a distributed team with minimal supervision.
  

Nice to have

• Prior experience creating training content, courseware, workshops or conference trainings.


• A public body of work: blog, CTF challenges, open‑source tooling, conference talks (Black Hat, OWASP AppSec, BSides, DevSecCon), CVEs.


• Experience with LLM tooling and frameworks (LangChain/LangGraph, vector stores, agent frameworks) from a security perspective.


• Video production or screencast experience.

What we are not looking for

• Someone who has only run scanners and triaged tickets.


• Someone who needs a full spec before starting.


• Apple/Mac stack (MBP, Keynote).


• Highly competitive compensation.


• Flexible work schedule; hybrid from our Hyderabad office, or fully remote for the right person.


• Free access to every Practical DevSecOps certification, plus a budget for conferences and training.


• Time explicitly allocated for research — staying current is the job, not something you do after hours.


• Your work is seen and used by thousands of security professionals worldwide.