Dev Sec Ops Engineer Senior

Experian

2d•Remote

About The Position

Experian is seeking a Senior AWS Cloud Security / DevSecOps Engineer to lead AWS WAF/API security and expand layer‑7 inspection in a large, high‑traffic environment. This role involves contributing to policy strategy, owning tuning, developing availability‑safe mitigations (including virtual patching), and building incident plans. The engineer will leverage AWS networking experience and zero trust fundamentals, along with automation skills in Python and Tines. Collaboration with SRE/TOC/SecOps teams is crucial for ensuring logging and telemetry availability during incidents and improving reliability. The company values innovation, safe experimentation, thoughtful adoption of new technology, and AI literacy with a security mindset, particularly for agentic/GenAI architectures and network-layer mitigations in regulated environments.

Requirements

Deep AWS networking experience at production scale (segmentation, traffic flows, failure modes, safe change)
Zero Trust network design (least privilege, controlled access, policy‑driven segmentation)
3+ years of experience in DevSecOps and automation skills (Python, Tines)
Web application and API security expertise with availability‑safe controls
AI security literacy, including GenAI risks and mitigations
Excellent documentation, cross‑team influence, and incident response discipline
3+ years of experience in regulated environments (PCI DSS 4.x; familiarity with FFIEC / FinCEN expectations)
Audit and evidence‑driven control design

Responsibilities

AWS L7 inspection & network protection, including WAF, firewall, IPS, and proxy patterns with safe rollouts
WAF & API security: tuning, false‑positive reduction, and emergency mitigations/virtual patching
AI / agentic integration security using least‑privilege gateways, segmentation, logging, and rate controls
Edge performance: CDN, caching, compression, and edge‑to‑origin troubleshooting
Incident response engineering in partnership with SRE/TOC/SecOps, improving telemetry and runbooks
Automation with Python and Tines to enforce guardrails and reduce toil
Cloud security posture awareness across CSPM and SASE/SSE in AWS environments