Sr Developer Security Operations Engineer

PennEngineering®•Plumstead Township, PA

7d•Hybrid

About The Position

PennEngineering is seeking a Senior Developer Security Operations Engineer to build and operate the security guardrails, tooling, and automation that help engineering teams deliver software securely at high velocity. This hands-on leadership role supports the company’s cloud-native, AI-powered application portfolio and is responsible for the security posture of its global AWS cloud environment and customer-facing platforms. The role embeds security into development and deployment practices while avoiding unnecessary friction for engineering teams. The position also helps shape and implement security architecture and governance for AI-powered workflows, agentic systems, and customer-facing digital platforms. It works with information systems, infrastructure, AI engineering, and product teams to secure applications and cloud operations, automate policy enforcement and remediation, and maintain incident-response practices. The role is based in Danboro, Pennsylvania, with a hybrid work arrangement.

Requirements

At least 8 years of experience in cloud security, DevSecOps, or security engineering.
Deep expertise in AWS architecture and security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail.
Proven experience integrating automated SAST, SCA, and DAST tooling into modern CI/CD pipelines without degrading deployment velocity.
Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK.
Strong scripting and automation skills in Python, Go, or Bash, including the ability to build custom security tools and integrate systems programmatically.
Experience securing containerized workloads, including Docker, Kubernetes, and ECS/EKS deployments.
Practical knowledge of vulnerability management, threat modeling, incident response, and cloud-native security operations.
Ability to partner with engineering and product teams to design security that accelerates rather than blocks delivery.
Excellent communication skills, including translating technical security risks into business terms for senior leadership.
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related technical field.

Nice To Haves

Experience securing AI/LLM-powered systems and contributing to their security architecture, including prompt-injection protections, model access controls, output validation, and auditability for agentic applications.
Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment.
Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool use in agentic AI systems.
Experience in manufacturing, industrial, or complex B2B technology environments.
Relevant certifications such as AWS Security Specialty, CISSP, CCSP, or equivalent.
Experience contributing to or leading security programs supporting SOC 2, ISO 27001, or similar compliance frameworks.
Background working in a global organization with multi-region cloud deployments.

Responsibilities

Continuously assess and harden AWS cloud infrastructure for customer-facing platforms and internal enterprise systems.
Design and build custom security tools, frameworks, and policies to protect organizational assets.
Own vulnerability management from triage and prioritization through tracking and automated remediation.
Establish security posture baselines, remediation SLAs, continuous improvement practices, and executive-level reporting.
Integrate automated SAST, SCA, and DAST scanning into CI/CD pipelines while supporting the daily deployment cadence.
Configure pre-commit hooks, pull request checks, and branch protection rules to detect and block secrets, misconfigurations, and vulnerable dependencies before production.
Partner with AI engineering teams to secure AI/LLM workloads, including prompt-injection protections, model input/output validation, and agentic-system guardrails.
Establish security gate standards and developer-friendly documentation explaining enforcement and remediation.
Automate policy enforcement with infrastructure-as-code tools such as Terraform and AWS Config so non-compliant infrastructure cannot be provisioned.
Build event-driven automation to detect and remediate common security issues in near real time.
Define and maintain governance standards for access controls, secrets management, encryption, and data classification.
Maintain audit-ready documentation and evidence collection to support internal compliance reviews and external assessments.
Maintain AWS operational security, using automation for scaling events, configuration drift, and self-healing infrastructure.
Automate correlation of CrowdStrike and Zscaler telemetry to reduce alert noise and trigger response workflows.
Define and own security incident-response playbooks; lead root-cause analyses and post-incident reviews.
Collaborate with information systems, infrastructure, and AI engineering teams to integrate threat response across the technology stack.
Help define and implement security architecture for AI-powered applications, including data access controls, model governance, prompt safety, and agentic-system auditability.
Evaluate security posture for new platforms, tools, and third-party integrations.
Partner with the Principal Systems Architect and AI engineering teams to incorporate security requirements into solution designs early.
Monitor emerging threats relevant to AI, cloud-native architectures, and manufacturing or industrial environments, and translate findings into actionable guidance.
Track security performance using KPIs for vulnerability remediation, pipeline scanning, incident detection and response, policy-as-code coverage, cloud posture, and AI workload security.

Benefits

Medical coverage
Employer-paid dental and vision
Parental leave
401k and employer match
Paid time off and holidays
Tuition reimbursement
Community volunteering
Talent referral bonus program
Onsite fitness center
Employee-centric culture
Company-provided technology, including laptop, phone, and monitors for office and home environments