Build and maintain Python-based software for security automation and incident response.
Implement and maintain CI/CD pipelines, automated testing, and deployment processes to ensure efficient development workflows.
Mentor junior developers, conduct technical training, and contribute to team knowledge base and best practices.
Take ownership, ensuring timely completion of development tasks while meeting quality and functional requirements.
Implement software engineering best practices, design patterns, and development methodologies across the team .
Responsible to further design, development and implementation of the global cyber security processes/capabilities/tools.
Actively drive the further development of the Security Monitoring Tool stack (SIEM, APT, SOAR, EDR/XDR, Cloud Security (Azure, AWS, Google Cloud), Darknet Scanning including AI and ML based big data analysis.
Qualifications
Bachelor’s or Master’s degree in a related IT field, preferably with a focus on cyber security.
Coding and Development: Proficiency in writing clean and efficient code in Python, adhering to industry best practices.
Software Design and Architecture: Ability to understand and design maintainable software systems in a team. Strong understanding of architectural principles.
Deployment Pipelines and Branching strategies: Experience in GitFlow/GitHub-Flow, CI/CD pipelines, code reviews and unit testing.
Code Review, Testing and Quality Assurance: Understanding and implementing automated testing and quality assurance processes. Conducting thorough code reviews to ensure code quality, efficiency, and long-term maintainability.
Problem-Solving and Debugging: Advanced analytical skills to debug, troubleshoot, and optimize complex software issues and system performance.
Deep knowledge in the field of IT security (SIEM, Firewalls, EDR, IDS/IPS, SOAR, vulnerability scanning, endpoint and network forensic including Threat Hunting).
Very familiar with SOAR products for the automation of security incidents including use case/playbook development for an automated SOC operations or automated vulnerability analysis.
Broad understanding in all areas of modern IT infrastructure including AI/ML and big data analysis.
Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain including TTPs.
Working in a structured and service-oriented fashion.
High degree of self motivation and self organization.
Ability to travel up to 10% travel (including international)
#LI-AM3
#Hybrid
