DevSecOps Security Engineer MOR2JP00018173

ZealHire Inc.; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

ZealHire in New York, NY is seeking a DevSecOps Security Engineer to join a hybrid security team. You will implement client-specific security policies in CI/CD tools and collaborate with DevOps and Security to automate security capabilities across pipelines.

The role requires hands-on development in Python and strong Linux skills, with experience in CI/CD, SAST/OSS scanning, and security tooling. On-site in NYC, 12+ month contract with a 5-day office requirement.

Qualifications

• 5+ years software development experience using Python with APIs.
• 5+ years in Linux and strong Bash scripting.
• Deep understanding of CI/CD pipelines.
• Experience with Windows environments and basic scripting.

Responsibilities

• Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.
• Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
• Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.
• With your development background and security knowledge, provide secure stable platform for enforcing application security controls.
• Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.
• Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities.

Skills

Python

REST APIs

Linux

CI/CD pipelines

Windows scripting

Education

Bachelor's degree in IT or related field

Tools

Jenkins

GitHub Actions

TeamCity

Kubernetes

Docker

Puppet

Job description

DevSecOps Security Engineer MOR2JP00018173 | JPC-9116

ZealHire. Nyc, New York, United States Contract Deadline: Dec 11, 2026

Location: NYC at One New York Plaza Term / Duration: 12+ Months

Work Schedule: 5 days in the NYC office is a must

Interview process: 1 Video interview and 1 in-person with entire team.

Looking for a resume who has worked at 2-5 of these Capital Market companies: (in recent 3-4 years)- DO NOT SEND ANYONE WHO HASN'T WORKED

UBS (Union Bank of Switzerland), Credit-Suisse, Deutsche Bank, Citi, Citi Bank, Morgan Stanley, Societe Generale, SMBC (Sumitomo Mitsui Bank Corp), Goldman Sachs, BNP Paribas, Fidelity, S&P Global, FactSet, Thomson Reuters, BlackRock, RBS (Royal Bank of Scotland), RBC (Royal Bank of Canada), Barclays, Bloomberg, ICE (Intercontinental Exchange), New York Stock Exchange, London Stock Exchange (LSE), Bank of America, JP Morgan, FactSet, S&P Global, Standard & Poors, Vanguard, Charles Schwab, eTrade, Jefferies, ICE Data Services, LSEG (London Stocke Exchange), Moody’s, MorningStar, Markit, Fidessa, IES, Quandal, Alliance Bernstein, Eaton Vance, PIMCO (Pacific Investment Management Corp), Neuberger Berman, Invesco, T. Rowe, Price, Capital Group, Lazard, State Street Global Advisors, Franklin Templeton, Wellington Management, Northern Trust Asset Management, Schroders, KKR, Principal Asset Management, TIAA-CREFetc

Job Title - DevSecOps Security Engineer

Location - New York, NY Duration - 12+ months

What You/ll Do:

• Be part of a team of engineers to implement client specific security policies in the CI/CD security tools including but not limited to SAST, OSS and SCA applications.


• -Work with Development, DevOps and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.


• -Define the security rules that needs to be adhered to at a code level in web and mobile applications written in .NET, Java, React, Python and other languages.


• -With your development background and security knowledge, provide secure stable platform for enforcing application security controls.


• -Support security standards, design & implement architectural patterns to increase the resiliency and scalability of security platform.


• -Work with our partners to implement, manage, and optimize security measures within our GitHub repositories to continuously improve code integrity and protect against vulnerabilities.

Required skillset:

• -Must have: 5+ years software development experience using Python Working with APIs, including but not limited to ReSToUnit testing frameworks


• -Multi-process and multi-thread architecture


• -Must have: 5+ years in linux, strong bash scripting skills.


• -Deep understanding of CI CD pipelines


• -Working knowledge of windows environment, simple scripting dos-batch etc.


• -Bachelor?s degree with 10+ years of work experience in the IT field


• -Ability to process large datasets for reporting and analysis.

Desired Skillset:

• -A self-starter, with a strong desire for learning new technologies and applying them to solve problems


• -Knowledge of SAST, OSS technologies


• -Ability to perform Python code reviews with minimal assistance


• -Expertise in monitoring, alerting, reporting, data analysis is desired.


• -Experience with application build environments like Jenkins, GitHub Actions, Teamcity etc.


• -DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus


• -Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open source scanning is a plus

$000,000 – $000,000 Salary range is not shown on the candidate portal