AI-Driven AppSec & DevSecOps Engineer (Hybrid)

Shift Technology; Boston (MA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Shift Technology is seeking an Application Security / DevSecOps Engineer to drive security across the software delivery pipeline and act as a first responder within Security Operations. You will work with data scientists, software delivery teams, and engineers to ensure security-by-design and effective incident response.

The role emphasizes secure coding practices, threat modeling, tooling automation, and governance for AI-assisted development within a hybrid US/Canada work model.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field or equivalent experience.
• 7+ years of experience in Security Operations, Incident Response, Cybersecurity Monitoring, or similar security role.

Responsibilities

• Secure by Design (Shift Left) across data science and engineering teams.
• Drive Application Security by defining policies, standards, and guidelines.
• Lead threat modeling exercises and promote secure development practices.
• Automate security testing (SAST, DAST, SCA) and ensure CI/CD tooling security.
• Monitor, triage, and respond to security alerts and incidents across the environment.
• Collaborate with engineering, infrastructure, and helpdesk to remediate security issues.

Skills

Security Operations

Incident Response

Cloud Security

SIEM

EDR

Vulnerability Management

Security Auditing

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Microsoft Sentinel

CrowdStrike

GitHub Advanced Security

Tenable

GitHub Actions

Azure

Job description

Shift Technology is seeking an Application Security / DevSecOps Engineer to drive security across the software delivery pipeline and act as a first responder within Security Operations. You will work with data scientists, software delivery teams, and engineers to ensure security-by-design and effective incident response.

The role emphasizes secure coding practices, threat modeling, tooling automation, and governance for AI-assisted development within a hybrid US/Canada work model.