AI-Driven AppSec & DevSecOps Engineer (Remote)

ixolabs.ai; France; À distance; EUR 82 656 - 123 984; Temps partiel

Résumé du poste

ixolabs.ai is seeking an Application Security / DevSecOps Engineer for AI training to help AI generate code, threat models, and pipeline configurations that hold up to real attackers and real auditors.

This remote, contractor role supports flexible hours (10-25 hours/week) with weekly payments via Stripe or bank transfer, start date immediate, and a focus on secure software supply chains and threat modeling for AI systems.

Qualifications

• 5+ years in application security, DevSecOps, or security engineering.
• Deep familiarity with OWASP Top 10 and modern web/API attack classes.
• Strong grasp of SAST, DAST, IAST, and software composition analysis tools.
• Experience designing secure CI/CD pipelines and supply-chain controls.
• Comfort with an offensive-security background (CTFs, bug bounty, internal red team).
• Familiarity with cloud-native security (CSPM, CWPP) and zero-trust patterns.

Responsabilités

• Generate and evaluate instruction-response pairs covering OWASP Top 10, secure coding, and threat modeling.
• Review AI-generated code for SAST/DAST integration (Snyk, Semgrep, CodeQL, OWASP ZAP).
• Provide feedback on SBOMs, dependency scanning, and supply-chain security (SLSA, Sigstore).
• Validate AI handling of secrets management (Vault, AWS Secrets Manager, Doppler).
• Evaluate AI-generated CI/CD pipelines for security gates and signing.
• Identify subtle issues in input validation, deserialization, SSRF, and IDOR vulnerabilities.

Connaissances

OWASP Top 10

Threat modeling

CI/CD security

SAST/DAST/IAST

SBOM & SCA

Outils

Snyk

Semgrep

CodeQL

OWASP ZAP

Sigstore

Vault

Doppler

SLSA

Description du poste

ixolabs.ai is seeking an Application Security / DevSecOps Engineer for AI training to help AI generate code, threat models, and pipeline configurations that hold up to real attackers and real auditors.

This remote, contractor role supports flexible hours (10-25 hours/week) with weekly payments via Stripe or bank transfer, start date immediate, and a focus on secure software supply chains and threat modeling for AI systems.