Job Title:

Senior DevSecOps Engineer Location-Type:

Hybrid -

Danboro, PA Start Date:

ASAP Duration:

Permanent Compensation Range:

$140,000 - $160,000/yr

Benefits:

Health, Dental, Vision, 401

K, PTO, Tuition Reimbursement Visa Sponsorship:

Not eligible for visa sponsorship This hands-on architect-level role is responsible for building and operating the security architecture that enables the client's engineering teams to ship code safely at high velocity, with a critical focus on securing a growing AI-powered application portfolio. Job Summary

• Design and implement automated security scanning (SAST, SCA, DAST) embedded directly into CI/CD pipelines to maintain high deployment velocity without sacrificing security coverage
• Continuously assess, harden, and elevate the security posture of the client's AWS cloud infrastructure across customer-facing and internal enterprise systems
• Build event-driven, policy-as-code automation to detect and auto-remediate common security issues in near real-time, replacing manual audit processes
• Define the security architecture for AI-powered applications, including data access controls, model governance, prompt safety, and auditability for agentic systems
• Own the end-to-end vulnerability management lifecycle, including triage, prioritization, tracking, and automated remediation of vulnerabilities and cloud misconfigurations
• Collaborate with infrastructure, AI engineering, and IS teams to integrate threat response practices across the full technology stack
• Define and lead security incident response playbooks, root-cause analyses, and post-incident reviews to drive systemic improvements

Minimum Requirements:

• 8+ years of experience in cloud security, DevSecOps, or security engineering
• Deep expertise in AWS security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail
• Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity
• Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK
• Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically
• Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field

Preferred Qualifications:

• Experience defining security architecture for AI/LLM-powered systems, including prompt injection protections, model access controls, output validation, and auditability for agentic applications
• Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment
• Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems
• Relevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent
• Experience contributing to or leading security programs in support of

SOC 2, ISO

27001, or similar compliance frameworks

• Background working in a global organization with multi-region cloud deployments