Senior DevSecOps & AI Security Engineer
Role Overview
We are seeking an experienced Senior DevSecOps & AI Security Engineer to strengthen security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions . The role focuses on application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices.
Primary Skills
•
Application Security - SAST, DAST, Secure Code Review
•
Penetration Testing - Web, API, Mobile
•
AI/LLM Security - Prompt Injection, Jailbreak & Model Security
•
DevSecOps & CI/CD Security
•
Vulnerability Management & Remediation
•
Security Automation using Python
Secondary Skills
•
Azure Cloud Security
•
Container & Kubernetes Security
•
SCA & Open-Source Security
•
GitHub Security Controls
•
Threat Modeling & Risk Assessment
•
Security Governance & Developer Enablement
Key Responsibilities
Security Assessment & Testing
•
Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications .
•
Conduct secure code reviews and identify application security weaknesses.
•
Validate findings from SAST, DAST, SCA, and container security tools .
•
Perform vulnerability analysis, root-cause investigation, and remediation validation.
AI Security
•
Assess AI/LLM applications for security vulnerabilities and misuse scenarios.
•
Conduct prompt injection, manipulation, and jailbreak testing.
•
Evaluate AI deployment architectures and recommend appropriate security controls.
•
Support secure AI adoption across enterprise platforms.
DevSecOps & Automation
•
Integrate security controls into CI/CD pipelines and deployment workflows.
•
Implement shift-left security practices.
•
Automate security validation and reporting using Python .
•
Optimize vulnerability assessment and remediation workflows.
•
Enhance security monitoring and policy enforcement across development environments.
Cloud & Container Security
•
Perform Azure cloud security assessments .
•
Review Kubernetes and containerized workloads for security risks.
•
Analyze container images and deployment configurations.
•
Recommend cloud-native security practices and remediation actions.
Vulnerability Management & Governance
•
Review and validate vulnerabilities identified by enterprise security tools.
•
Prioritize findings based on exploitability, business risk, and operational impact .
•
Drive remediation with engineering teams and verify effectiveness.
•
Support security governance, compliance, and audit activities.
Stakeholder Engagement
•
Collaborate with development, DevOps, architecture, and product teams .
•
Provide guidance on secure coding and vulnerability remediation.
•
Mentor engineering teams on security-first development.
•
Present security findings and recommendations to technical and business stakeholders.
Required Qualifications
•
Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity, or related field .
•
6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.
•
Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps .
•
Hands-on experience with penetration testing, secure code reviews, and vulnerability management.
•
Experience securing cloud-native and AI-enabled applications .
•
Strong Python scripting and security automation experience.
Certifications
Any 2-3 certifications mandatory:
•
CISSP
•
CSSLP
•
Microsoft Azure Security Engineer ( AZ-500 )
•
Certified DevSecOps Professional
•
Cloud Security Certifications - Azure/AWS