Cyber Security Engineer (DevSecOps)

Cybersecurity ArchitectJob Category: Compliance/Security Requisition Number: CYBER004344Posted: June 26, 2026Full-TimeHybridNew York, NY 10017, USA +5 more locationsDescriptionPosition ResponsibilitiesBuild and maintain Python automation, services, and integrations that improve detection, response, and customer experience across the security platformDevelop and operate CI/CD pipelines and infrastructure-as-code (Terraform, Ansible) to deploy and maintain security toolingBuild and tune detection and response content in the Elastic Stack: data ingestion, parsing and normalization, detection rules, and Kibana dashboardsIntegrate security tools and data sources using REST APIs, webhooks, and SOAR playbooksContainerize and deploy workloads with Docker and Kubernetes following secure-deployment practicesWrite tests, documentation, and runbooks for the workflows and scripts you shipWork alongside the Cybersecurity Architect to implement the platform's reference architecture and detection standardsPosition RequirementsDegree in Computer Science or Cyber Security, or equivalent hands-on experience2+ years building software in a professional setting, with strong Python development (services, automation, and APIs, not only light scripting)Hands-on experience with the Elastic Stack (Elasticsearch, Logstash/Beats, Kibana) for log ingestion, detection, or analyticsPractical CI/CD experience, including automated testing, build pipelines, and secure deployment workflowsWorking knowledge of infrastructure-as-code (Terraform, Ansible, or Salt) and configuration managementProficiency with Git/GitHub in a collaborative engineering workflowExperience with REST APIs, webhooks, and integrations in automation workflowsFamiliarity with core security concepts: logging, alerting, threat detection, and incident responseWorking knowledge of Linux and Windows and their security implicationsStrong problem-solving mindset and clear written and verbal communicationPreferred ExperienceExperience automating detection and response workflows in a SIEM/XDR (Elastic preferred; Splunk or Microsoft Sentinel a plus)Working knowledge of the MITRE ATT&CK framework and its use in detection engineeringExposure to SOAR, MISP, or Sigma and detection-as-code practicesFoundational cloud security on AWS or Azure (IAM, shared responsibility model, basic compliance)Exposure to container security and Kubernetes hardeningInterest in applying AI tooling to security automationEqual Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.