Engineer: Cybersecurity

Job Description

The ICE Cybersecurity Automation team automates global information security workflows in a highly regulated critical financial infrastructure environment. This engineer focuses on backend services, APIs, databases, and integrations supporting Red Team, Blue Team, Threat Intelligence, Application Security, and Governance, Risk and Compliance. The role combines software development, AI-assisted coding, system administration, and command-line troubleshooting.

Responsibilities

• Design and maintain secure backend applications and automation services using Python, Django, and other appropriate frameworks.
• Develop APIs and security platform integrations; build data pipelines, relational schemas, and efficient SQL queries.
• Use AI-assisted coding tools for development, refactoring, debugging, testing, and documentation. Review generated code and validate functionality, dependencies, and security before deployment.
• Administer Linux application environments using Bash and command-line tools; manage services, permissions, configuration, logs, and scheduled jobs, and troubleshoot network and resource issues.
• Automate testing, deployments, and provisioning through CI/CD, containers, and infrastructure as code. Apply version control, peer review, and secure coding practices.
• Partner with security teams to deliver automation, analytics, and behavioral detection workflows. Support production services through monitoring, incident investigation, performance improvements, and runbooks.

Knowledge and Experience

• 3+ years of software development experience with a strong backend or automation focus; proficiency in Python and Django or a comparable backend framework.
• Hands-on experience with AI-assisted coding tools, including providing context, reviewing suggestions, debugging, and testing generated code. Ability to identify insecure or incorrect output and protect sensitive data according to company policies.
• Experience developing and consuming REST APIs, including JSON, authentication, authorization, and integration troubleshooting; proficiency in SQL and relational database design, migrations, and query optimization.
• Practical Linux system administration experience with services, processes, permissions, package management, and log analysis. Proficiency in command-line interfaces and Bash scripting; working knowledge of DNS, TCP/IP, HTTP, and TLS.
• Experience with Git, code reviews, unit and integration testing, and the software development lifecycle; familiarity with CI/CD and tools such as Jenkins and Docker.
• Understanding of secure coding, secrets management, least privilege, and application security risks; strong troubleshooting and communication skills.

Preferred Qualifications

• Experience with cybersecurity automation in a regulated environment; Ansible, Terraform, Chef, or Puppet; background jobs or event-driven services; and PowerShell or Java.
• Familiarity with AI or machine learning integrations and Vue.js; university degree in Engineering, MIS, CIS, or a related discipline.