Senior Cloud Security Engineer - DevSecOps & CI/CD Security

Zealogics Inc; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Zealogics Inc. is seeking an experienced security-focused software engineer to implement Morgan Stanley specific security policies within CI/CD tooling.

You will work across Development, DevOps, and Security teams to automate security and compliance within DevSecOps workflows. You will define code-level security rules for apps in .NET, Java, React, and Python, and help maintain a secure platform that enforces security controls.

Qualifications

• 5+ years software development experience using Python.
• Working with APIs, including REST.
• Unit testing frameworks.
• Multi-process and multi-thread architecture.
• 5+ years in Linux, strong Bash scripting skills.
• Deep understanding of CI/CD pipelines.
• Windows environment scripting (DOS/BATCH).
• Bachelor’s degree with 10+ years of IT experience.
• Ability to process large datasets for reporting and analysis.
• Knowledge of SAST and OSS technologies is a plus.
• Experience with Jenkins, GitHub Actions, TeamCity is desirable.

Responsibilities

• Be part of a team of engineers to implement Morgan Stanley specific security policies in CI/CD security tools (SAST, OSS, SCA).
• Collaborate with Development, DevOps, and Security teams to automate security and compliance in DevSecOps processes.
• Define security rules at the code level for web and mobile apps (.NET, Java, React, Python).
• Provide a secure, stable platform to enforce application security controls.
• Support security standards and design patterns to enhance resiliency and scalability of the security platform.
• Work with partners to implement and optimize security measures in GitHub repositories to protect against vulnerabilities.

Skills

Python programming

Linux

CI/CD pipelines

Bash scripting

REST APIs

Unit testing frameworks

Multi-threading / multi-processing

Windows scripting (DOS/BATCH)

Data reporting & analysis

Code reviews

Education

Bachelor’s degree in IT or related field

Tools

Jenkins

GitHub Actions

TeamCity

Kubernetes

Docker

Puppet

Open source scanning tools

Job description

Zealogics Inc. is seeking an experienced security-focused software engineer to implement Morgan Stanley specific security policies within CI/CD tooling.

You will work across Development, DevOps, and Security teams to automate security and compliance within DevSecOps workflows. You will define code-level security rules for apps in .NET, Java, React, and Python, and help maintain a secure platform that enforces security controls.