#JR-26014759
globally distributed team responsible for cyber security innovation, architecture, engineering, solutions and capabilities development, cyber resiliency, access management engineering, data strategy, deployment maintenance, technical project management and information technology security control support.
We are seeking a highly skilled and experienced Application Developer to build software solutions that provide compliance evidencing and effectiveness measurements for cloud security controls. This role requires hands-on experience with AWS/Azure and modern SDLC practices. You will partner with cross-functional teams to design, implement, and maintain robust security solutions that protect cloud infrastructure from emerging threats while meeting functional, non-functional, and regulatory requirements.
Key Responsibilities
Design & Implementation: Design, develop, and integrate solutions to gather security control evidence across multiple cloud platforms (e.g., AWS or Azure) to ensure the security and compliance of cloud infrastructure and workloads.
Controls Evidencing and Enforcement: Identify security controls applicable to CI/CD pipelines and runtime environments to prevent misconfigurations and enforce security best practices and standards.
Software Engineering Delivery: Develop and deliver software solutions that meet functional, non-functional, and regulatory compliance requirements; write, test, debug, and maintain code primarily using Java and/or Python and related technologies.
Vulnerability management: hands-on experience with SCA, SAST, DAST vulnerability identification and remediation.
CI/CD & DevSecOps: Engage in continuous integration and deployment activities including automating build, test, and release pipelines; integrate security best practices into CI/CD processes and operational workflows.
Quality & Reliability: Troubleshoot defects, perform root-cause analysis, ensure software quality through unit, integration, and regression testing; contribute to code reviews.
Collaboration: Work closely with cross-functional teams to refine requirements and deliver secure, maintainable capabilities.
Compliance & Governance: Demonstrate cloud environments comply with internal control requirements and regulatory obligations using robust reporting and dashboards.
Experience & Qualifications
Cloud: Hands-on experience with AWS or Azure and software development life cycles (SDLCs). Deep knowledge of cloud platforms (AWS, Azure) and experience building and operating cloud-native services and business critical workloads.
Programming: Strong hands-on experience with Python, Java, or other object-oriented programming (OOP) languages; ability to write clean, testable, maintainable code.
DevSecOps / CI/CD: Strong understanding of DevSecOps principles; hands-on experience with CI/CD pipelines and related tooling and automating build/test/release workflows.
Infrastructure as Code (IaC): Hands-on experience with Terraform, or CloudFormation
Containers: Experience with Docker and orchestration tools such as Kubernetes.
Databases: Solid knowledge of relational databases (Oracle, MySQL, PostgreSQL) and NoSQL; ability to write complex SQL queries and perform thorough data validations.
APIs & Systems Integration: Experience building and integrating with REST APIs and system interfaces, with emphasis on maintainability, availability, reliability, performance, and security.
Preferred Technical Skills
Cybersecurity: Significant experience in cybersecurity across multiple domains, with a strong focus on cloud security and integrating controls as code. Experienced in secure coding practices, authentication protocols, cryptography basics, identity and access management, and familiarity with security testing and vulnerability assessment.
AI/ML: hands-on experience with agent-first development.
Soft Skills