Senior Security Engineer

Key Responsibilities

Include but are not limited to:

• Lead security operations initiatives focused on securing modern software development pipelines, CI/CD platforms, and cloud-native DevOps environments.
• Partner with engineering and DevOps teams to embed security controls into the Software Development Life Cycle (SDLC) using Dev/SecOps best practices.
• Design, implement, and monitor security controls for source code repositories, build systems, artifact management platforms, and deployment pipelines.
• Conduct threat modeling, risk assessments, application pen testing, and security reviews for internally developed applications, APIs, and automation platforms.
• Develop and maintain detection and response capabilities for software supply chain threats, credential misuse, pipeline compromise, and cloud workload attacks.
• Manage vulnerability management processes for applications, containers, infrastructure-as-code, open-source dependencies, and CI/CD tooling.
• Implement automated security scanning tools including SAST, DAST, SCA, IaC scanning, and container security solutions.
• Monitor security events across cloud platforms, developer tooling, SaaS environments, and production systems using SIEM/XDR technologies.
• Investigate and respond to security incidents involving applications, DevOps tooling, cloud environments, and identity platforms.
• Establish security standards for AI/ML systems including model governance, secure API usage, data protection, and responsible AI controls.
• Assess and mitigate emerging AI-related risks such as prompt injection, model abuse, data leakage, shadow AI usage, and unauthorized automation.
• Evaluate, implement, and secure enterprise AI tools to improve SecOps efficiency, threat detection, alert triage, and incident response workflows.
• Build automation scripts and workflows to streamline repetitive security operations tasks and improve response times.
• Collaborate with developers to remediate security findings quickly while balancing operational efficiency and release velocity.
• Create dashboards, metrics, and reporting for security posture