Remote Senior DevSecOps Engineer — AI & Cloud Security

Arbor Education; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Wellbeing program

32 days holiday

Life assurance 3x salary

Dental insurance

Pension

Flexible working

CPD budget

Job summary

Arbor Education is seeking a Senior DevSecOps Engineer to join our remote US team. You will drive security across platform architecture, supply chain, and AI-enabled components, partnering with Architecture and Platform teams to build secure-by-design systems.

You will implement threat modelling, enforce IaC security, and lead incident response while promoting secure development practices and blameless post-mortems.

Qualifications

• Extensive experience in cyber security and engineering practices.
• Proven DevSecOps scaling across large platforms.
• Strong IaC experience with Terraform and CloudFormation.
• Experience with AWS and distributed cloud systems.
• Knowledge of SAST/DAST/SCA, SBOM, and software supply chain security.
• Proficiency in container security (Docker/Kubernetes) and secret management.

Responsibilities

• Collaborate with stakeholders to pinpoint security enhancements across platform architecture and infrastructure.
• Embed robust security processes, controls, and tooling with Platform team.
• Threat model new systems including AI/LLM features and agentic workflows; translate findings into actions.
• Strengthen software supply chain: SBOMs, dependencies, artefact signing, provenance.
• Secure AI usage across the SDLC; ensure safe AI tools and MCP integrations.

Skills

Cyber security

DevSecOps

Threat modelling

Teamwork

English proficiency

Education

Bachelor's degree in CS/SE

AWS Security Specialty

Tools

Terraform

CloudFormation

Docker

Kubernetes

Snyk

Trivy

OPA/Conftest

Vault

DataDog

Job description

Arbor Education is seeking a Senior DevSecOps Engineer to join our remote US team. You will drive security across platform architecture, supply chain, and AI-enabled components, partnering with Architecture and Platform teams to build secure-by-design systems.

You will implement threat modelling, enforce IaC security, and lead incident response while promoting secure development practices and blameless post-mortems.