Python back-end developer - Cybersecurity - madrid

LEET Security (an Uptime Institute Company) is a leading Cybersecurity Rating Agency. Established in December 2010 with the sole purpose of building a cybersecurity rating service that customers and service providers use as a means to assess, manage and improve their cyber posture. LEET’s cybersecurity rating consolidates and maps a broad series of security standards and regulations so it can be effectively applied for multiple services & environments.

Hundreds of organizations have used LEET Security’s comprehensive Cybersecurity Rating methodology to assess their cybersecurity capabilities and improve their cyber resilience and efficiently manage the cyber risks associated with their supply chains.

Uptime Institute the Global Digital Infrastructure Authority® is an unbiased advisory organization focused on improving business-critical infrastructure’s performance, efficiency, and reliability through innovation, collaboration, and independent certifications. With over 3,000 projects completed in over 120 countries to date, Uptime Institute has paved new ground in implementing programs that help organizations advance the detection and mitigation of ICT (Information and Communication Technology) operational and cyber risk.

Uptime Institute, the Global Digital Infrastructure Authority® is headquartered in New York, NY, with main offices in London, Madrid, São Paulo, Dubai, Riyadh, Singapore, and Taipei.

We are looking for a Software Engineer specialized in Backend development with Python, focused on building, deploying, and maintaining scalable services/ microservices on Google Cloud Platform (GCP). The candidate will actively participate in defi ning and implementing CI/CD pipelines for deployment automation, as well as in the containerization and orchestration of applications and monitor the infrastructure.

Key Technical Responsibilities :

● Backend Development: Develop and maintain APIs and backend microservices in Python, focusing on service-based and distributed architectures.

● Message Brokering & Asynchronous Processing: Design and manage message queues using RabbitMQ to enable asynchronous inter-service communication, ensuring data consistency, reliability, and decoupled microservices architectures.

● CI/CD Implementation: Design and configure CI/CD pipelines (e.g., GitLab CI, Jenkins, GitHub Actions) for continuous integration and automated deployment on GCP.

● Containerization: Manage Docker containers, build optimized images, and deploy them on Kubernetes clusters (GKE).

● Cloud Management: Configure and maintain cloud environments on GCP, including services such as Cloud Run, Cloud Build, Compute Engine, App Engine, Pub/Sub, and Cloud Storage.

● Observability: Implement observability and monitoring practices (logs, metrics, alerts) for backend microservices.

● Security (DevSecOps): Ensure security throughout the development lifecycle by applying DevSecOps controls and leveraging cybersecurity knowledge.

● Documentation: Create and maintain technical documentation in English for APIs, infrastructure, and operational procedures.

● Collaboration: Work cross-functionally with Frontend, Operations, QA, and Security teams. Must-Have Technical Requirements

● Python Expertise: Solid experience in Backend development with Python, using relevant frameworks and libraries (FastAPI, Flask, Django, etc.).

● GCP Experience: Hands-on experience with Google Cloud Platform, including service deployment and cloud infrastructure management.

● Automation: Proficiency in CI/CD tools and methodologies for deployment automation.

● Orchestration: Experience creating, managing, and orchestrating containers with Docker and Kubernetes (specifically GKE).

●Language Skills: Upper-intermediate to high level of English for technical comprehension and documentation.

● Networking: Knowledge of networking fundamentals (TCP/IP, HTTP/HTTPS, DNS) and management of RESTful APIs. Desirable Knowledge & Experience (Nice to have)

● Development or scripting experience in GoLang and Node.js.

● Practical experience or training in security applied to software development and cloud environments (DevSecOps, vulnerability analysis, security policies, etc.).

● Familiarity with static/dynamic code analysis tools (SAST/DAST), container scanning, and infrastructure hardening.

● Understanding of current cybersecurity trends regarding development and operations.

Additional Competencies:

● Capacity for rapid diagnosis and troubleshooting in distributed environments.

● Teamwork, autonomy, and commitment to code quality and best practices.

● Ability to adapt to agile and dynamic environments.