Application Security Engineer ( DevSecOps), Python, BASH, APIs, SAST, OSS, SCA 12 Mts Con NYC

Zen & Art; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Zen & Art is seeking an Application Security Engineer (DevSecOps) to join the Cloud Security & Developer Enablement team in NYC/Alpharetta. You will implement client security policies across CI/CD pipelines, enforcing secure coding practices and automating security controls.

You bring 10+ years IT experience with 5+ years Python, strong Bash skills, and hands-on work with SAST, OSS, SCA, and CI/CD tooling. The role requires collaboration across Development, DevOps, and Security teams to secure

Qualifications

• Bachelor's degree with 10+ years of experience in IT required.
• 5+ years of software development experience using Python.
• Experience working with APIs, including REST.
• Proficient in unit testing frameworks.
• Strong Linux and Bash scripting skills (5+ years).
• Deep understanding of CI/CD pipelines.
• Working knowledge of Windows environments and simple scripting.

Responsibilities

• Be part of a team of engineers to implement client security policies in CI/CD security tools (SAST, OSS, SCA).
• Collaborate with Development, DevOps and Security to automate security and compliance in DevSecOps workflows.
• Define security rules at code level for web and mobile apps (.NET, Java, React, Python).
• Provide a secure, stable platform for enforcing application security controls.
• Support security standards and architectural patterns to improve security platform resiliency and scalability.
• Work with partners to implement and optimize security measures in GitHub repos to protect code integrity.

Skills

Python

APIs

Unit testing

Multi-process

Linux

Bash

CI/CD

Windows scripting

Dataset processing

Education

Bachelor's degree with 10+ years of work experience in the IT field

Tools

Jenkins

GitHub Actions

TeamCity

Kubernetes

Docker

Puppet

DAST

RASP

WAF

Job description

Application Security Engineer ( DevSecOps), Python, BASH, APIs, SAST, OSS, SCA 12+ Mts Con NYC JPC - 3585 Level 3 ( 10+ Yrs of total exp) Description: Application Security Engineer ( DevSecOps), Python, BASH, APIs, CI/CD (SAST, OSS, SCA applications)

Department: Cloud Security & Developer Enablement, CDRR

Role: Application Security Engineer

Location: ALPHARETTA OR NYC (2 roles)

About The Team

The mission of the Cloud Security & Developer Enablement team is to implement the Firm's Cybersecurity Strategy by architecting, engineering, deploying and operating technical security controls and capabilities for the Enterprise. This is achieved by continued focus on architectural rigor, automation, agile delivery and adoption of Cloud and application security control implementations by development community.

What You'll Do

• Be part of a team of engineers to implement Client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.
• Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
• Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.
• With your development background and security knowledge, provide secure stable platform for enforcing application security controls.
• Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.
• Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities.

Required Skillset

• Must have: 5+ years software development experience using Python
• Working with APIs, including but not limited to ReST
• Unit testing frameworks
• Multi-process and multi-thread architecture
• Must have: 5+ years in linux, strong bash scripting skills.
• Deep understanding of CI CD pipelines
• Working knowledge of windows environment, simple scripting dos-batch etc.
• Bachelor's degree with 10+ years of work experience in the IT field
• Ability to process large datasets for reporting and analysis.

Desired Skillset

• A self-starter, with a strong desire for learning new technologies and applying them to solve problems
• Knowledge of SAST, OSS technologies
• Ability to perform Python code reviews with minimal assistance
• Expertise in monitoring, alerting, reporting, data analysis is desired.
• Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc.
• DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus
• Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus