Python Developers

We are seeking an experienced Python Developer to support the automation of cybersecurity control testing aligned with NIST SP 800-53 Rev. 5 and 5A. This role will focus on designing and implementing automated scripts that assess the effectiveness of security controls across multiple enterprise systems.

The developer will work closely with Information System Security Officers (ISSOs), security engineers, and compliance teams to translate control requirements into automated test procedures. The goal is to reduce manual testing, improve consistency, and enable continuous monitoring through scalable, AI-assisted automation.

Key Responsibilities

• Design, develop, and maintain Python-based automation scripts to test and validate cybersecurity controls (NIST 800-53 Rev. 5 / 5A)
• Integrate with enterprise systems (e.g., cloud platforms, SIEMs, endpoint tools, identity systems) to collect evidence for control validation
• Collaborate with ISSOs and cybersecurity teams to:
• Interpret control requirements
• Define measurable testing criteria
• Assess control effectiveness
• Implement automated, scheduled testing capabilities using orchestration tools (e.g., cron, Airflow, Azure Automation)
• Develop reusable frameworks for continuous control monitoring (CCM)
• Leverage AI/ML technologies (e.g., Azure OpenAI, anomaly detection, natural language processing) to:
• Assist in control analysis
• Automate evidence review and classification
• Improve testing efficiency and insights
• Create dashboards and reporting outputs that clearly demonstrate compliance status and risk posture
• Ensure scripts are secure, well-documented, and aligned with DevSecOps best practices
• Support integration into CI/CD pipelines for security validation
• Maintain traceability between controls, test procedures, and system evidence

Preferred Qualifications

• Experience implementing Continuous Monitoring or Continuous ATO (cATO)
• Familiarity with FedRAMP, FISMA, or CMMC frameworks
• Experience with Azure OpenAI or AI/ML integration in security workflows
• Knowledge of:
• KQL (Kusto Query Language)
• REST APIs and microservices architecture
• Experience working in federal or regulated environments
• Security certifications (e.g., Security+, CISSP, CEH)