Security & Agentic AI DevSecOps Engineer

Job Role: Security & Agentic AI DevSecOps Engineer (Product Security) Location: Milpitas, CA (5 days work from office) -Onsite Job Description Role Overview As an AI Security & Agentic AI DevSecOps Engineer , you will act as a handson technical authority responsible for designing and implementing fully automated security controls across the software and AI lifecycle . Your focus will be to ensure that every meaningful security decision is enforced through automation , not manual processes.

You will embed security as code, policy as code, and continuous verification into modern software platforms and agentic AI systems , enabling secure innovation at scale across cloud, hybrid, and airgapped environments.

Key Responsibilities AI Security & Agentic Systems (AutomationFirst)

• Design and implement automated Agentic and AI security controlsfor agentic systems, including:

• Automated model access control, inference authorization, and rate limiting

• Policydriven prompt/instruction validation and misuse detection

• Automated enforcement of agenttoagent authentication and authorization

• Implement continuous, automated threat modeling for:

• LLM pipelines

• Agent orchestration frameworks

• AI gateways and inference services

• Build securebydefault reference architectures where AI guardrails are enforced via:

• Configurationascode

• Runtime policy engines

• Automated security testing pipelines

• Create Plugins , Hooks and Skills using claude code and or Microsoft AI foundry

DevSecOps & Secure SDLC (EndtoEnd Automation)

• Implement fully automated Secure SDLC pipelines, integrating:

• SAST, DAST, SCA, secrets detection, container scanning, and IaC scanning

• AIspecific security testing (prompt injection, model misuse, data leakage)

• Automated build and release policy enforcement (fail gates, conditional approvals)

• Ensure all security checks are:

• Triggered automatically via CI/CD and MLOps pipelines

• Enforced consistently across dev, test, and production

• Automate security validation during:

• Design reviews (templatedriven controls)

• Architecture reviews (reusable security patterns)

• Prerelease readiness checks

SBOM, AIBOM & Supply Chain Automation

• Design and operate automated SBOM and AIBOM pipelines, including:

• Continuous generation of SBOMs for software, containers, firmware, and artifacts

• Automated AIBOMs covering models, datasets, checkpoints, and training artifacts

• Implement automated vulnerability, license, and provenance analysis:

• Continuous ingestion of CVEs and advisories

• Automated policy enforcement for noncompliant components

• Integrate SBOM and AIBOM outputs into:

• CI/CD pipelines

• Deployment gates

• Audit and compliance reporting workflows

Runtime Security, Risk & Metrics Automation

• Implement continuous, automated security monitoringacross:

• Application runtimes

• AI/ML inference services

• Agent workflows and interactions

• Develop automated security metrics and telemetry to measure:

• Vulnerability exposure and remediation velocity

• Secure SDLC and DevSecOps maturity

• Model and AI risk posture over time

• Automate security feedback loops so findings:

• Generate actionable tasks

• Feed directly into engineering backlogs

• Drive measurable risk reduction

Technical Influence & Enablement

• Ability and willing to learn,teach and develop agentic AI workflow automation using copilot studio and or Claude code

• Act as a technical authority on AI security automation and DevSecOps.

• Define reusable security automation patterns, templates, and reference implementations.

• Partner with engineering, AI/ML, platform, and compliance teams to replace manual security workflows with automated controls.

• Contribute to internal security standards that mandate automation by default.

• Strong handson experience designing automated Product Security or AI Security systems.

• Deep knowledge of:

• Operating systems, infrastructure, cloud platforms, and hybrid environments

• Automation frameworks and pipelinedriven enforcement models

• Ability to interpret and secure code written in multiple languages, with automation as the primary mitigation strategy.

• Experience integrating security tooling via APIs and pipelines, not manual review.

• Familiarity with security intelligence ingestion and automation, including:

• CVE feeds

• Security advisories

• Automated alerting and remediation workflows

• Strong understanding of cybersecurity, privacy, and AI governance requirements, with experience translating them into automated controls.

• Ability to concurrently deliver multiple security automation initiatives.

Minimum Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT Security, or equivalent experience.

• Experience in DevOps, SecOps, DevSecOps, or MLOps, with a strong automation focus.

• Demonstrated success implementing automated Secure SDLC pipelines.

• Ability to evaluate code and architecture risk and remediate through automation, not policy alone.

• Familiarity with security frameworks and scoring systems:

• MITRE Telecommunication&CK

• CVSS

• CWE

• Strong technical communication skills and crossfunctional influence.

Thanks & Regards, Preeti sagar

US IT Recruiter

Direct : +1 609-732-0766 Email: [email protected]

linkedin.com/in/preeti-s-81803216b

4365 Route 1 South, Suite 105 Princeton, NJ 08540 www.applabsystems.com