SecOps Engineer – Remote Contract

About the role

We are seeking a SecOps Engineer to join our team on a remote contract basis. You will play a critical part in protecting our applications by performing secure code reviews, vulnerability remediation, and building automation tools.

Key responsibilities

• Conduct expert-level secure code reviews focused on OWASP Top 10 and CWE vulnerability classes.
• Identify, triage, and remediate application‑layer flaws such as broken access control, IDOR, SQL injection, command injection, and deserialization issues.
• Develop and maintain security automation tools using Python, GoLang, or JavaScript/TypeScript to streamline detection and remediation.
• Perform and document penetration tests while collaborating cross‑functionally to drive remediation initiatives.
• Advise development teams on secure coding practices and embed a proactive security mindset throughout the software lifecycle.
• Stay current on emerging threats and integrate best practices into customer environments.

Required profile

• Strong experience in software engineering or security operations with a focus on application‑layer security.
• Proven ability to detect, prioritize, and remediate vulnerabilities in production applications.
• Excellent written and verbal communication skills, with an emphasis on clarity and detail.

Required skills

• Python
• GoLang
• Rust
• JavaScript
• TypeScript
• OWASP Top 10
• CWE
• Secure code review
• Penetration testing