Note: The job is a remote job and is open to candidates in USA. Quantum Sky is hiring a Senior Software Engineer, Cloud & Cybersecurity to build and enhance cloud-based cybersecurity and compliance applications for highly regulated environments. The role focuses on full-stack development, backend services, integrations, DevOps, CI/CD, Infrastructure as Code, cloud-native applications, and secure software delivery across the full development lifecycle.
Responsibilities
- Design, develop, test, and maintain full-stack application capabilities using Python and Django, with an emphasis on secure, scalable, maintainable, and production-ready software
- Develop backend services, APIs, integrations, automation, and supporting tools using Python, Go (Golang), JavaScript/TypeScript, and other appropriate technologies
- Build new product capabilities and enhance existing functionality across cloud-based cybersecurity and compliance applications, including backend services and user-facing application features
- Design and implement integrations with cloud services, security technologies, vulnerability management platforms, monitoring solutions, and third-party systems using REST APIs and structured data
- Develop capabilities that ingest, process, correlate, and present security and compliance information while automating workflows such as security monitoring, vulnerability management, evidence collection, control management, and reporting
- Work within and contribute to a DevOps and Infrastructure as Code (IaC) environment, supporting the provisioning, configuration, deployment, and operation of application infrastructure using Terraform, CloudFormation, or similar technologies
- Develop, maintain, and improve CI/CD pipelines and automated deployment processes that support application builds, automated testing, security validation, and reliable deployment across development, staging, and production environments
- Build, deploy, and support containerized and cloud-native applications, collaborating with cloud and DevOps engineers to improve application scalability, reliability, observability, security, and performance
- Use AI-assisted software development tools such as Claude Code, OpenAI Codex, Cursor, GitHub Copilot, or similar technologies as part of day-to-day engineering workflows to accelerate coding, debugging, refactoring, testing, documentation, and code analysis
- Apply engineering judgment when working with AI-generated code and recommendations, validating outputs for correctness, security, maintainability, performance, and alignment with engineering standards
- Troubleshoot complex application, integration, deployment, and production issues, identify root causes, and implement sustainable solutions
- Participate throughout the software development lifecycle, including architecture and design discussions, code reviews, testing, documentation, release management, deployment, and continuous improvement of engineering practices
- Apply secure software development and DevSecOps practices throughout the application lifecycle and collaborate with cybersecurity and compliance subject matter experts to translate security requirements into practical software capabilities
Skills
- • Demonstrated professional experience designing, developing, and supporting production software applications
- • Strong hands-on software development experience with Python, including professional experience developing applications using Django
- • Programming experience with Go (Golang) and familiarity with JavaScript/TypeScript or other modern application development languages
- • Experience designing, developing, and consuming RESTful APIs and integrating applications with external systems and services
- • Experience with relational databases, data modeling, backend application architecture, and modern front-end web development technologies
- • Hands-on experience working in cloud environments such as AWS, GCP, or Azure, with an understanding of how applications are deployed, configured, secured, monitored, and operated in production
- • Experience working within a CI/CD and DevOps-based software delivery environment, including automated builds, testing, deployments, version control, and release processes
- • Experience working with Infrastructure as Code, using technologies such as Terraform, CloudFormation, or similar tools to support repeatable and automated cloud deployments
- • Experience with Docker, containers, and cloud-native application deployment
- • Demonstrated experience using AI-assisted software development tools such as Claude Code, OpenAI Codex, Cursor, GitHub Copilot, or comparable technologies as part of day-to-day professional software development
- • Ability to independently troubleshoot software, integration, deployment, and production issues and develop secure, reliable, and maintainable solutions
- • Strong analytical, problem-solving, and communication skills with the ability to collaborate across software engineering, product, cloud, cybersecurity, and compliance teams
- • US Citizenship with the ability to obtain a security clearance
- • Familiarity with Kubernetes or managed container platforms is highly desirable
- • Bachelor's degree in Computer Science, Software Engineering, Information Technology, Cybersecurity, or a related technical field
- • Experience developing software for cybersecurity, cloud security, GRC, compliance, or continuous monitoring use cases
- • Experience with AWS and/or GCP cloud-native services, including serverless, container, database, messaging, monitoring, identity, and security services
- • Hands-on experience with technologies such as Terraform, Docker, Kubernetes, GitHub Actions, GitLab CI, AWS CodePipeline, CloudFormation, or comparable DevOps and cloud automation technologies
- • Experience with observability and monitoring platforms such as CloudWatch, OpenSearch, Splunk, Datadog, New Relic, or similar technologies
- • Experience with advanced AI-assisted or agentic software engineering workflows, including AI-driven testing and validation, code analysis, workflow automation, or agent orchestration
- • Knowledge of the NIST Risk Management Framework (RMF), NIST SP 800-53 Revision 5, FedRAMP, and FISMA security and compliance requirements
- • Experience translating cybersecurity or regulatory requirements into application features, automation, workflows, integrations, or reporting capabilities
- • Familiarity with vulnerability management, POA&M management, security controls, evidence collection, and continuous monitoring concepts
- • Experience integrating applications with security tools, cloud APIs, vulnerability scanners, SIEM platforms, or other cybersecurity technologies
- • Experience developing and operating software supporting federal government, enterprise, or other highly regulated environments
- • DOD/DoW Secret or Top Secret clearance is preferred
Company Overview