Senior DevSecOps Engineer — Secure CI/CD & Python

Zen & Art; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Zen & Art is seeking an Application Security Engineer (DevSecOps) to join the Cloud Security & Developer Enablement team in NYC/Alpharetta. You will implement client security policies across CI/CD pipelines, enforcing secure coding practices and automating security controls.

You bring 10+ years IT experience with 5+ years Python, strong Bash skills, and hands-on work with SAST, OSS, SCA, and CI/CD tooling. The role requires collaboration across Development, DevOps, and Security teams to secure

Qualifications

• Bachelor's degree with 10+ years of experience in IT required.
• 5+ years of software development experience using Python.
• Experience working with APIs, including REST.
• Proficient in unit testing frameworks.
• Strong Linux and Bash scripting skills (5+ years).
• Deep understanding of CI/CD pipelines.
• Working knowledge of Windows environments and simple scripting.

Responsibilities

• Be part of a team of engineers to implement client security policies in CI/CD security tools (SAST, OSS, SCA).
• Collaborate with Development, DevOps and Security to automate security and compliance in DevSecOps workflows.
• Define security rules at code level for web and mobile apps (.NET, Java, React, Python).
• Provide a secure, stable platform for enforcing application security controls.
• Support security standards and architectural patterns to improve security platform resiliency and scalability.
• Work with partners to implement and optimize security measures in GitHub repos to protect code integrity.

Skills

Python

APIs

Unit testing

Multi-process

Linux

Bash

CI/CD

Windows scripting

Dataset processing

Education

Bachelor's degree with 10+ years of work experience in the IT field

Tools

Jenkins

GitHub Actions

TeamCity

Kubernetes

Docker

Puppet

DAST

RASP

WAF

Job description

Zen & Art is seeking an Application Security Engineer (DevSecOps) to join the Cloud Security & Developer Enablement team in NYC/Alpharetta. You will implement client security policies across CI/CD pipelines, enforcing secure coding practices and automating security controls.

You bring 10+ years IT experience with 5+ years Python, strong Bash skills, and hands-on work with SAST, OSS, SCA, and CI/CD tooling. The role requires collaboration across Development, DevOps, and Security teams to secure