Sr. Dev SecOps Engineer

Job Title: Senior DevSecOps Engineer

Location-Type: Hybrid - Danboro, PA

Start Date:  ASAP

Duration: Permanent

Compensation Range: $140,000 - $160,000/yr

Benefits: Health, Dental, Vision, 401K, PTO, Tuition Reimbursement

Visa Sponsorship: Not eligible for visa sponsorship

Job Description: This hands-on architect-level role is responsible for building and operating the security architecture that enables the client's engineering teams to ship code safely at high velocity, with a critical focus on securing a growing AI-powered application portfolio.

Job Summary

• Design and implement automated security scanning (SAST, SCA, DAST) embedded directly into CI/CD pipelines to maintain high deployment velocity without sacrificing security coverage

• Continuously assess, harden, and elevate the security posture of the client's AWS cloud infrastructure across customer-facing and internal enterprise systems

• Build event-driven, policy-as-code automation to detect and auto-remediate common security issues in near real-time, replacing manual audit processes

• Define the security architecture for AI-powered applications, including data access controls, model governance, prompt safety, and auditability for agentic systems

• Own the end-to-end vulnerability management lifecycle, including triage, prioritization, tracking, and automated remediation of vulnerabilities and cloud misconfigurations

• Collaborate with infrastructure, AI engineering, and IS teams to integrate threat response practices across the full technology stack

• Define and lead security incident response playbooks, root-cause analyses, and post-incident reviews to drive systemic improvements

Minimum Requirements:

• 8+ years of experience in cloud security, DevSecOps, or security engineering 

• Deep expertise in AWS security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail

• Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity

• Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK

• Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically

• Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field

Preferred Qualifications:

• Experience defining security architecture for AI/LLM-powered systems, including prompt injection protections, model access controls, output validation, and auditability for agentic applications

• Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment

• Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems

• Relevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent

• Experience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks

• Background working in a global organization with multi-region cloud deployments