Dev Sec Ops Engineer Senior

Experian

2d•Remote

About The Position

We're hiring a Senior AWS Cloud Security / DevSecOps Engineer to lead AWS WAF/API security and expand layer‑7 inspection across a large, high‑traffic environment. You'll contribute to policy strategy, own tuning, develop availability‑safe mitigations (including virtual patching), and build incident plans that isolate cause and minimize growth. You'll bring AWS networking experience and zero trust fundamentals. Additionally, you'll have automation skills, including proficiency in Python and Tines. You'll partner with SRE/TOC/SecOps to ensure logging and telemetry are available during incidents. Furthermore, you'll improve reliability over time. We also value innovators and tinkerers who run safe experiments and adopt new technology thoughtfully, without compromising customer trust. We also value AI literacy and an AI security mindset: understanding agentic/GenAI architectures, inherent risks, and network‑layer mitigations that allow safe adoption in regulated environments. You will report to the Senior Manager Network Security.

Requirements

Deep AWS networking experience at production scale (segmentation, traffic flows, failure modes, safe change).
Zero Trust network design (least privilege, controlled access, policy‑driven segmentation).
3+ years of experience
DevSecOps and automation skills (Python, Tines).
Web application and API security expertise with availability‑safe controls.
AI security literacy , including GenAI risks and mitigations.
Excellent documentation, cross‑team influence, and incident response discipline.
Audit and evidence‑driven control design.

Responsibilities

AWS L7 inspection & network protection , including WAF, firewall, IPS, and proxy patterns with safe rollouts
WAF & API security : tuning, false‑positive reduction, and emergency mitigations/virtual patching
AI / agentic integration security using least‑privilege gateways, segmentation, logging, and rate controls
Edge performance : CDN, caching, compression, and edge‑to‑origin troubleshooting
Incident response engineering in partnership with SRE/TOC/SecOps, improving telemetry and runbooks
Automation with Python and Tines to enforce guardrails and reduce toil
Cloud security posture awareness across CSPM and SASE/SSE in AWS environments