Senior AppSec Engineer - CI/CD & DevSecOps Expert

Russell Tobin; New York (NY); Hybrid; USD 96,000 - 103,000; Full time

Benefits offered by this job

Health coverage

Retirement 401(k)

Life & disability

Employee discounts

Job summary

PrideGlobal is seeking a security-focused software engineer to join the Cloud Security & Developer Enablement team in New York. The role focuses on architecting, engineering, deploying and operating security controls across enterprise applications.

You will implement policy in CI/CD tooling, collaborate with Development/DevOps/Security, and define code-level rules for multiple languages while ensuring scalable, secure platforms and robust compliance automation.

Qualifications

• 5+ years of software development experience, Python-focused.
• Experience with RESTful APIs and CI/CD pipelines.
• Strong Linux and bash scripting skills; Windows scripting is a plus.
• Identify and implement secure coding practices across services.

Responsibilities

• Implement Brokerage security policies in CI/CD tools (SAST/OSS/SCA).
• Collaborate with Development, DevOps, Security to automate security/compliance in DevSecOps.
• Define code-level security rules for .NET, Java, React, Python apps.
• Provide secure, stable platform for enforcing application security controls.
• Support security architecture patterns for resiliency and scale.
• Work with partners to integrate security tooling in GitHub repos to reduce vulnerabilities.

Skills

Python

REST APIs

Unit testing

Multithreading

Linux Bash

CI/CD Pipelines

Windows Scripting

Data processing

Education

Bachelor's degree in IT

Tools

Jenkins

GitHub Actions

TeamCity

Kubernetes

Docker

Puppet

Job description

PrideGlobal is seeking a security-focused software engineer to join the Cloud Security & Developer Enablement team in New York. The role focuses on architecting, engineering, deploying and operating security controls across enterprise applications.

You will implement policy in CI/CD tooling, collaborate with Development/DevOps/Security, and define code-level rules for multiple languages while ensuring scalable, secure platforms and robust compliance automation.