Senior DevSecOps Engineer — AI/LLM Security Lead

AECOM; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Join AECOM's AI Engineering security team to lead the security of our AI-driven products and platforms. You will review and sign off on new features, own AI/LLM security, drive CVE remediation, and manage our security tooling and testing programs.

You will work with engineers to balance risk and delivery, grow the security function, and champion secure development across a large, global organisation.

Qualifications

• Hands-on security engineering experience.
• Leading security reviews and threat modelling of new products and features.
• Vulnerability management and incident response experience.
• Maintaining security scanning tooling in CI/CD (SAST, SCA, secrets, container, IaC) with GitHub Actions and Terraform.
• Experience managing end-to-end penetration tests.
• Cloud security in Azure and/or GCP.
• Ability to explain risk clearly and influence stakeholders.
• Experience in fast-moving, large global organisations.

Responsibilities

• Run security reviews of new products from design to launch with threat modelling and remediation.
• Own security for AI/LLM features, mitigate prompt injection and data leakage risks.
• Secure our AI supply chain including models, vector stores, and training data.
• Set risk-based release criteria and sign-off for changes.
• Own CVE remediation across code, dependencies, containers, and cloud infrastructure.
• Maintain security scanning tooling (SAST, SCA, secrets, container, IaC) in CI/CD.
• Manage the penetration testing programme and coordinate external testers.
• Strengthen Azure and GCP identity security, IAM, networking, secrets management, logging.
• Lead incident response and post-incident reviews; keep runbooks up to date.
• Establish a security champions programme across engineering teams.

Skills

Security engineering

Threat modelling

Vulnerability management

Incident response

CI/CD security tooling

SAST

SCA

Secret management

Container security

IaC security

Penetration testing

Azure security

GCP security

Risk communication

Fast delivery

Global organisation experience

Tools

GitHub Actions

Terraform

Job description

Join AECOM's AI Engineering security team to lead the security of our AI-driven products and platforms. You will review and sign off on new features, own AI/LLM security, drive CVE remediation, and manage our security tooling and testing programs.

You will work with engineers to balance risk and delivery, grow the security function, and champion secure development across a large, global organisation.