Sr. Dev SecOps Engineer

Penn Engineering•Danboro, PA

4d•Hybrid

About The Position

This hands-on architect-level role is responsible for building and operating the security architecture that enables the client's engineering teams to ship code safely at high velocity, with a critical focus on securing a growing AI-powered application portfolio.

Requirements

8+ years of experience in cloud security, DevSecOps, or security engineering
Deep expertise in AWS security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail
Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity
Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK
Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically
Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments
Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field

Nice To Haves

Experience defining security architecture for AI/LLM-powered systems, including prompt injection protections, model access controls, output validation, and auditability for agentic applications
Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment
Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems
Relevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent
Experience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks
Background working in a global organization with multi-region cloud deployments

Responsibilities

Design and implement automated security scanning (SAST, SCA, DAST) embedded directly into CI/CD pipelines to maintain high deployment velocity without sacrificing security coverage
Continuously assess, harden, and elevate the security posture of the client's AWS cloud infrastructure across customer-facing and internal enterprise systems
Build event-driven, policy-as-code automation to detect and auto-remediate common security issues in near real-time, replacing manual audit processes
Define the security architecture for AI-powered applications, including data access controls, model governance, prompt safety, and auditability for agentic systems
Own the end-to-end vulnerability management lifecycle, including triage, prioritization, tracking, and automated remediation of vulnerabilities and cloud misconfigurations
Collaborate with infrastructure, AI engineering, and IS teams to integrate threat response practices across the full technology stack
Define and lead security incident response playbooks, root-cause analyses, and post-incident reviews to drive systemic improvements