- Lead the design and development of extended detection and response (XDR) and DNS-based cybersecurity products and backend services using up-to-date programming languages and frameworks
- Turn security and business requirements into secure, scalable software solutions
- Implement secure coding practices aligned with industry standards such as the Open Worldwide Application Security Project (OWASP)
- Perform code reviews and mentor junior and intermediate developers to uphold software quality and security standards
- Work closely with cybersecurity analysts, DevOps and infrastructure teams across CIRA
- Support continuous integration and continuous delivery (CI/CD) pipelines, along with automated testing, deployment and monitoring in cloud and hybrid environments
- Investigate and resolve complex issues related to application performance, security vulnerabilities and system interoperability
- Participate in architecture and design discussions to inform system evolution and technical decision-making
- Write and maintain clear technical documentation for systems, processes and deployments
- Participate in a rotating 24/7 on-call schedule to support service uptime and incident response.
Requirements
- Bachelor's degree in computer science, software engineering or a related technical field
- 7+ years of professional experience in software development
- Advanced proficiency in programming languages such as Java (Spring or Play Framework) or Python
- Proficiency in Linux environments and scripting with Bash for automation and troubleshooting
- Strong knowledge of secure application design, threat mitigation and authentication and authorization mechanisms
- Experience building and supporting CI/CD pipelines using tools such as GitLab CI, Jenkins or TeamCity
- Familiarity with cloud-native development, containerization technologies such as Docker and infrastructure-as-code tools such as Terraform or Ansible
- Understanding of DNS, networking protocols and their role in internet infrastructure
- Experience working with relational and non-relational databases such as PostgreSQL, MySQL, DynamoDB or similar technologies
- Understanding of cybersecurity concepts and technologies, including endpoint detection and response (EDR), extended detection and response (XDR), vulnerability scanners, firewalls and frameworks such as MITRE ATT&CK.;
Core Competencies
Demonstrates expertise in designing and developing cybersecurity products, with a strong focus on secure coding practices, CI/CD pipeline implementation, and mentoring development teams. Proficient in modern programming languages and frameworks, with a solid understanding of cybersecurity concepts and technologies.
Highest-signal resume keywords
- Java (Spring or Play Framework)
- Python
- CI/CD Pipeline Implementation
- Secure Application Design
- Cloud-Native Development