Security Controls Engineer

Tata Consultancy Services; Jersey City (NJ); On-site; USD 80,000 - 90,000; Full time

Job summary

Tata Consultancy Services in Jersey City is seeking a DevSecOps engineer with a strong coding background to design and develop custom security controls from threat modelling outputs. The role emphasizes detective controls using Python-based frameworks and preventative controls using OPA/Rego policies.

You will extend and enhance security control frameworks, develop automated unit tests and behavioral (BDD) test cases, and integrate controls into CI/CD pipelines for continuous validation,

Qualifications

• 3–5 years of DevSecOps engineering with cloud experience (AWS, GCP, Azure).
• Strong software engineering background with testing methodologies and tools.
• Advanced proficiency in Python and Terraform for testing, automation and tooling.
• Experience with API integrations and backend development.
• Hands-on with automated testing frameworks (Python), CI/CD pipelines, and cloud-native development.

Responsibilities

• Design and develop custom security controls from threat modelling outputs.
• Build detective controls using Python-based frameworks and preventative controls with OPA/Rego policies.
• Extend and enhance existing security control frameworks.
• Develop and maintain automated unit tests and Behavioral (BDD) test cases.
• Integrate controls into CI/CD pipelines for continuous validation.
• Collaborate with threat modelling teams, cloud architects, and security SMEs.

Skills

Python

Terraform

APIs

Backend development

CI/CD pipelines

Automated testing

Detection engineering

Education

Bachelor of Computer Science

Tools

Splunk SPL

YARA

OPA

Job description

Job Description

• Design and develop custom security controls based on threat modelling outputs
• Build:
  • Detective controls using Python-based frameworks
  • Preventative controls using OPA/Rego policies
• Extend and enhance existing security control frameworks
• Develop and maintain:
  • Automated unit tests
  • Behavioral (BDD) test cases
• Integrate controls into CI/CD pipelines for continuous validation
• Collaborate with:
  • Threat modeling teams
  • Cloud architects
  • Security SMEs

Key Responsibilities

• Design and develop custom security controls based on threat modelling outputs
• Build:
  • Detective controls using Python-based frameworks
  • Preventative controls using OPA/Rego policies
• Extend and enhance existing security control frameworks
• Develop and maintain:
  • Automated unit tests
  • Behavioral (BDD) test cases
• Integrate controls into CI/CD pipelines for continuous validation
• Collaborate with:
  • Threat modeling teams
  • Cloud architects
  • Security SMEs

Required Qualifications

This is a development-heavy role. Candidates must demonstrate strong coding capability.

Security Experience Is Required, But Coding Proficiency Is Mandatory.

• Minimum of 3-5 years of experience in DevSecOps engineering with a focus on cloud environments (AWS, GCP, Azure), ideally working within a security program.
• Strong software engineering background - proficiency in software testing methodologies and tools.
• Advanced proficiency in Python - proficiency with Python and Terraform for testing, automation and custom tool development.
• Proficiency with:
  • API integrations and backend development
  • Writing scalable, maintainable code
• Hands-on experience with:
  • Automated testing frameworks (Python)
  • CI/CD pipelines
  • Experience with cloud-native development and architecture, leveraging services and tools specific to AWS, GCP, and Azure.
• Experience with detection engineering: detection-as-code practices, developing and maintaining detection rules
• Hands-on experience with Open Policy Agency (OPA) for policy enforcement
• Proficiency in DevOps tools and practices
• Experience with SIEM query languages such as Splunk SPL, YARA rules, etc.
• MUST pass Karat Assessment (Python focused).

Salary Range

Salary Range: $80,000 to $90,000 per year

Qualifications

BACHELOR OF COMPUTER SCIENCE