Security Controls Engineer

Tata Consultancy Services; Irving (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Training opportunities

Job summary

Tata Consultancy Services in Irving, TX is seeking a DevSecOps engineer with strong coding skills to design and implement security controls in cloud environments (AWS, GCP, Azure) and to strengthen detection via policy-as-code.

You will build Python-based tooling, extend CI/CD pipelines, write automated tests, and collaborate with threat modeling teams. A Bachelor of Computer Science is required; experience with Splunk SPL, YARA, OPA, and Terraform is valued; must pass Karat assessment.

Qualifications

• 3–5 years in DevSecOps with cloud focus (AWS, GCP, Azure) within a security program.
• Strong software engineering background – proficiency in software testing methodologies and tools.
• Advanced proficiency in Python and Terraform for testing, automation and custom tool development.
• Proficiency with API integrations and backend development.
• Write scalable, maintainable code.
• Hands-on experience with automated testing frameworks (Python).
• Hands-on experience with CI/CD pipelines.
• Experience with cloud-native development and architecture (AWS, GCP, Azure).
• Experience with detection engineering: detection-as-code practices.
• Open Policy Agent (OPA) for policy enforcement.
• Proficiency in DevOps tools and practices.
• Experience with SIEM query languages such as Splunk SPL and YARA rules.
• MUST pass Karat assessment (Python focused).

Responsibilities

• Design and develop custom security controls based on threat modelling outputs.
• Build detective controls using Python-based frameworks.
• Build preventative controls using OPA/Rego policies.
• Extend and enhance existing security control frameworks.
• Develop and maintain automated unit tests.
• Develop and maintain behavioral (BDD) test cases.
• Integrate controls into CI/CD pipelines for continuous validation.
• Collaborate with threat modeling teams, cloud architects, and security SMEs.

Skills

Threat modelling

Automated testing

CI/CD

Backend development

Cloud environments

APIs

Python coding

Karat assessment prep

Education

Bachelor of Computer Science

Tools

Python

Terraform

Splunk SPL

YARA

OPA

Job description

Job Description

This is a development-heavy role. Candidates must demonstrate strong coding capability.

Security Experience Is Required, But Coding Proficiency Is Mandatory.

Key Responsibilities

• Design and develop custom security controls based on threat modelling outputs
• Build detective controls using Python-based frameworks
• Build preventative controls using OPA/Rego policies
• Extend and enhance existing security control frameworks
• Develop and maintain automated unit tests
• Develop and maintain behavioral (BDD) test cases
• Integrate controls into CI/CD pipelines for continuous validation
• Collaborate with threat modeling teams, cloud architects, and security SMEs

Required Qualifications

• Minimum of 3-5 years of experience in DevSecOps engineering with a focus on cloud environments (AWS, GCP, Azure) within a security program
• Strong software engineering background – proficiency in software testing methodologies and tools
• Advanced proficiency in Python and Terraform for testing, automation and custom tool development
• Proficiency with API integrations and backend development
• Write scalable, maintainable code
• Hands‑on experience with automated testing frameworks (Python)
• Hands‑on experience with CI/CD pipelines
• Experience with cloud‑native development and architecture, leveraging specific services and tools for AWS, GCP, and Azure
• Experience with detection engineering: detection‑as‑code practices and maintaining detection rules
• Hands‑on experience with Open Policy Agency (OPA) for policy enforcement
• Proficiency in DevOps tools and practices
• Experience with SIEM query languages such as Splunk SPL and YARA rules
• MUST pass Karat Assessment (Python focused)

Salary Range: $100,000 to $150,000 per year

Qualifications: BACHELOR OF COMPUTER SCIENCE