Security Automation Engineer (Python): Cloud, AWS & CI/CD Expert

Marlabs Inc.; Northern (KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Marlabs Inc. is seeking a Security Automation Engineer (Python) to design, build, and maintain production-grade automation that strengthens security operations and engineering efficiency across the organization. The role emphasizes hands-on development on AWS and secure SDLC practices.

You will integrate security tools, create cloud-native automation, and contribute to scalable, compliant software solutions with cross-functional teams across Security, Engineering, and Operations.

Qualifications

• 5+ years of professional software development experience, including strong Python expertise building production-grade applications, automation frameworks, API integrations, and data processing solutions.
• Recent hands-on AWS experience, with a proven track record building, deploying, and operating production workloads using Lambda, ECS/Fargate, S3, IAM, API Gateway, and related cloud services.
• Proven experience authoring and maintaining Terraform modules, managing Terraform state across multiple environments, and implementing Infrastructure as Code for enterprise cloud platforms.
• Hands-on experience designing, owning, and troubleshooting GitHub Actions CI/CD pipelines, including automated testing, deployment automation, security controls, and release management.
• Experience integrating enterprise security tools through APIs, including SAST, DAST, CNAPP/CSPM, SIEM, secrets management, vulnerability management, GRC, ITSM, or related security platforms.
• Strong understanding of secure software development practices, including vulnerability management, patch management, source code reviews, dependency scanning (SCA), static code analysis (SAST), secure containerization, pre-commit controls, input validation, secrets management, and least-privilege IAM principles.
• Excellent communication and collaboration skills with the ability to work effectively across Security, Engineering, Cloud Operations, and business teams.

Responsibilities

• Design, develop, and maintain Python-based automation solutions, APIs, data pipelines, and workflow orchestration supporting security and cloud operations.
• Build and maintain integrations with enterprise security platforms including SAST, DAST, CNAPP/CSPM, SIEM, secrets management, vulnerability management, and ticketing systems using REST APIs.
• Develop and support cloud-native applications and automation workflows on AWS leveraging services such as Lambda, ECS/Fargate, S3, IAM, and API Gateway.
• Author, maintain, and enhance reusable Terraform modules and Infrastructure as Code solutions across multiple environments to support scalable and secure cloud deployments.
• Design, implement, and troubleshoot end-to-end CI/CD pipelines using GitHub Actions, incorporating automated testing, security validation, deployment automation, and operational monitoring.
• Implement secure software development practices including code reviews, SAST, dependency scanning (SCA), secure container builds, input validation, secrets management, and security gates within CI/CD pipelines.
• Automate security processes including vulnerability remediation workflows, compliance reporting, security findings management, and operational metrics to improve efficiency and reduce manual effort.
• Collaborate with cross-functional stakeholders to translate security and business requirements into scalable, reliable, and maintainable software solutions.

Skills

Python

AWS

Terraform

GitHub Actions

Security tool integrations

CI/CD security controls

API integrations

Data processing

Tools

Terraform

GitHub Actions

AWS Lambda

ECS/Fargate

S3

IAM

API Gateway

SAST

DAST

CNAPP/CSPM

SIEM

Job description

Marlabs Inc. is seeking a Security Automation Engineer (Python) to design, build, and maintain production-grade automation that strengthens security operations and engineering efficiency across the organization. The role emphasizes hands-on development on AWS and secure SDLC practices.

You will integrate security tools, create cloud-native automation, and contribute to scalable, compliant software solutions with cross-functional teams across Security, Engineering, and Operations.