Role Overview
We are seeking an experienced Senior DevSecOps & AI Security Engineer to strengthen security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions. The role focuses on application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices.
Primary Skills
- Application Security – SAST, DAST, Secure Code Review
- Penetration Testing – Web, API, Mobile
- AI/LLM Security – Prompt Injection, Jailbreak & Model Security
- DevSecOps & CI/CD Security
- Vulnerability Management & Remediation
- Security Automation using Python
Secondary Skills
- Azure Cloud Security
- Container & Kubernetes Security
- SCA & Open-Source Security
- GitHub Security Controls
- Threat Modeling & Risk Assessment
- Security Governance & Developer Enablement
Key Responsibilities
Security Assessment & Testing
- Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications.
- Conduct secure code reviews and identify application security weaknesses.
- Validate findings from SAST, DAST, SCA, and container security tools.
- Perform vulnerability analysis, root-cause investigation, and remediation validation.
AI Security
- Assess AI/LLM applications for security vulnerabilities and misuse scenarios.
- Conduct prompt injection, manipulation, and jailbreak testing.
- Evaluate AI deployment architectures and recommend appropriate security controls.
- Support secure AI adoption across enterprise platforms.
DevSecOps & Automation
- Integrate security controls into CI/CD pipelines and deployment workflows.
- Implement shift-left security practices.
- Automate security validation and reporting using Python.
- Optimize vulnerability assessment and remediation workflows.
- Enhance security monitoring and policy enforcement across development environments.
Cloud & Container Security
- Perform Azure cloud security assessments.
- Review Kubernetes and containerized workloads for security risks.
- Analyze container images and deployment configurations.
- Recommend cloud-native security practices and remediation actions.
Vulnerability Management & Governance
- Review and validate vulnerabilities identified by enterprise security tools.
- Prioritize findings based on exploitability, business risk, and operational impact.
- Drive remediation with engineering teams and verify effectiveness.
- Support security governance, compliance, and audit activities.
Stakeholder Engagement
- Collaborate with development, DevOps, architecture, and product teams.
- Provide guidance on secure coding and vulnerability remediation.
- Mentor engineering teams on security-first development.
- Present security findings and recommendations to technical and business stakeholders.
Required Qualifications
- Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field.
- 6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.
