> Markdown version of [/jobs/ext/2604886-devsecops-engineer-with-python](https://www.wearedevelopers.com/jobs/ext/2604886-devsecops-engineer-with-python). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Devsecops Engineer with Python - **Company:** IMR Soft, LLC - **Location:** New York, NY, United States - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** Artificial Intelligence, Airflow, Bash Shell, Code Review, Computer Programming, Continuous Integration, Github, JSON, Python (Programming Language), SQL Databases, Systems Integration, Tripwire, Management of Software Versions, Large Language Models, Prompt Engineering, Mttr, Tenable Nessus, Devsecops, Docker, Jenkins, Artifactory - **Published:** August 20, 2026 - **Apply:** https://www.careerjet.com/jobad/usd0a5deea96b518de24adced8809def86 ## About the Role Programming: Strong Python (scanners, orchestration, API integration); basic Bash for CI/CD glue Source & Artifact Systems: GitHub (Actions, Advanced Security, PR workflows) and JFrog Artifactory/Xray; ability to scale across multi-repo, multi-language codebases Scanning Tools: Hands-on with Snyk, Xray, CodeQL / Dependabot, Trivy, or Semgrep; understanding of CVE/CVSS scoring and EOL-detection sources (e.g., endoflife.date) AI-Driven Remediation: Building agentic workflows (LLM-based) that interpret findings, generate patch PRs, run tests, and summarize fixes; prompt engineering for code-editing agents CI/CD & Orchestration: Integrating scan-and-fix pipelines into GitHub Actions/Jenkins; Docker for isolated fix-testing; scheduling via Airflow/cron Reporting: Structuring findings (JSON/SQL) into dashboards for tracking coverage and trends Supporting Skills Security fundamentals (injection, auth flaws, supply-chain/SBOM risk) Risk-based prioritization beyond raw CVSS scores Semantic versioning awareness for safe auto-upgrades Testing discipline - regression validation before auto-merge Communication Skills Translating vulnerability data into concise, risk-framed leadership updates (exposure counts, MTTR, fix-rate trends) Writing clear status emails on scan coverage and outstanding critical items Building the business case (time saved, risk reduced) for non-technical stakeholders Continuous Learning Tracking emerging agentic/AI remediation tools and evaluating fit before firm-wide adoption Skill Levels Expert Level resource: 8 to 10 or more total experience out of which at least three years of experience in the relevant AI driven automation for code scanning and remediation matching the above skills Advanced level: Total 6 8 years of total experience out of which at least three years of experience in the relevant AI driven automation for code scanning and remediation matching the above skills ## Related Videos - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)