Senior DevSecOps & AI Security Engineer

Senior DevSecOps & AI Security Engineer Role Overview

We are seeking an experienced Senior DevSecOps & AI Security Engineer to strengthen security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions. The role focuses on application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices.

Primary Skills

• Application Security SAST, DAST, Secure Code Review

• Penetration Testing Web, API, Mobile

• AI/LLM Security Prompt Injection, Jailbreak & Model Security

• DevSecOps & CI/CD Security

• Vulnerability Management & Remediation

• Security Automation using Python

Secondary Skills

• Azure Cloud Security

• Container & Kubernetes Security

• SCA & Open-Source Security

• GitHub Security Controls

• Threat Modeling & Risk Assessment

• Security Governance & Developer Enablement

Key Responsibilities Security Assessment & Testing

• Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications.

• Conduct secure code reviews and identify application security weaknesses.

• Validate findings from SAST, DAST, SCA, and container security tools.

• Perform vulnerability analysis, root-cause investigation, and remediation validation.

AI Security

• Assess AI/LLM applications for security vulnerabilities and misuse scenarios.

• Conduct prompt injection, manipulation, and jailbreak testing.

• Evaluate AI deployment architectures and recommend appropriate security controls.

• Support secure AI adoption across enterprise platforms.

DevSecOps & Automation

• Integrate security controls into CI/CD pipelines and deployment workflows.

• Implement shift-left security practices.

• Automate security validation and reporting using Python.

• Optimize vulnerability assessment and remediation workflows.

• Enhance security monitoring and policy enforcement across development environments.

Cloud & Container Security

• Perform Azure cloud security assessments.

• Review Kubernetes and containerized workloads for security risks.

• Analyze container images and deployment configurations.

• Recommend cloud-native security practices and remediation actions.

Vulnerability Management & Governance

• Review and validate vulnerabilities identified by enterprise security tools.

• Prioritize findings based on exploitability, business risk, and operational impact.

• Drive remediation with engineering teams and verify effectiveness.

• Support security governance, compliance, and audit activities.

Stakeholder Engagement

• Collaborate with development, DevOps, architecture, and product teams.

• Provide guidance on secure coding and vulnerability remediation.

• Mentor engineering teams on security-first development.

• Present security findings and recommendations to technical and business stakeholders.

Required Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or related field.

• 6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.

• Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps.

• Hands-on experience with penetration testing, secure code reviews, and vulnerability management.

• Experience securing cloud-native and AI-enabled applications.

• Strong Python scripting and security automation experience.

Certifications

Any 2 3 certifications mandatory:

• CISSP

• CSSLP

• Microsoft Azure Security Engineer (AZ-500)

• Certified DevSecOps Professional

• Cloud Security Certifications Azure/AWS