Information Security Automations Developer

Role & responsibilities

Automated Evidence Collection and Testing

• Lead the development and maintenance of automated processes for evidence collection and compliance testing, leveraging cutting-edge tools, including AI, to streamline security governance, assessments, and audits.
• Proactively identify and mitigate any discrepancies in security evidence collection through continuous testing and validation.

Integration and Security Systems Development

• Craft and enhance integrations between information security solutions and enterprise systems, ensuring robust and secure data communication, storage, and processing.
• Collaborate with cross-functional teams to resolve discrepancies between systems and data.

Security Awareness Initiatives

• Drive the creation of training materials and awareness programs both for a general audience as well as materials that emphasize secure coding best practices.
• Partner with the training and development teams to deliver workshops and educational sessions geared towards enhancing security awareness and practices throughout the enterprise.

Policy and Standard Enhancement

• Assist in the review and update of security policies and standards, focusing on precise and effective control language.
• Ensure policies align with industry standards and address regulatory requirements with clarity and precision.

Technical Skills and Experience

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of software development experience with a focus on cybersecurity, including secure coding and systems integration.
• Deep understanding of security automation tools and environments.
• Proficiency in languages such as Python, Java, C#, or similar, with a keen ability to develop and test secure applications.
• Familiarity with enterprise security systems and frameworks (e.g., SIEM, IAM, DLP).
• Hands-on experience with policy development and security awareness program creation.
• Understanding of industry frameworks (e.g., NIST SP 800-53, CSA, CIS).