Senior AI AppSec DevSecOps Engineer

KPMG LLP; Montvale (NJ); On-site; USD 120,000 - 180,000; Full time

Job summary

KPMG LLP is seeking a Senior Associate, Application Security, DevSecOps to join our Enterprise Security Services organization. You will help secure AI-enabled development tools and lead security evaluations across architectures, data flows, and configurations.

The role requires four+ years in application security or DevSecOps, with programming experience in Java, Python, JavaScript, and SQL, plus relevant certifications.

Qualifications

• Four+ years of experience in application security, DevSecOps, or secure software engineering.
• Bachelor's degree preferred; high school diploma/GED required; certifications GWAPT, GPEN, CEH, GWEB, CISSP, CISM or equivalent preferred.
• Proficiency in programming/scripting languages: Java, C#, JavaScript, Python, SQL.
• Strong understanding of application security principles, risk assessment, and familiarity with AI-specific AppSec risks.
• Knowledge of SAST/DAST tools and secure cloud design; Azure preferred.
• Excellent written and verbal English communication; able to explain risks to diverse audiences.
• Applicants must be authorized to work in the U.S. without visa sponsorship now or in the future.

Responsibilities

• Maintain awareness of AI application security threats and support AI AppSec standards and guardrails.
• Perform hands-on security evaluations of AI-enabled development tools, reviewing architectures, data flows, configurations, and controls.
• Execute standard AppSec checklists and evaluation criteria for AI tools and use cases.
• Document evaluation outcomes, risks, controls, remediation actions, and present findings to AppSec leadership.
• Develop automations for metrics collection and automated testing to support AI tool evaluations and related use cases.
• Provide security guidance to developers and platform teams, validate remediation activities, and ensure proper security configurations.

Skills

Application security

DevSecOps

CI/CD pipelines

Security testing

Java

Python

JavaScript

SQL

Education

Bachelor's degree

Security certifications

Tools

SAST

DAST

Azure

Job description

KPMG LLP is seeking a Senior Associate, Application Security, DevSecOps to join our Enterprise Security Services organization. You will help secure AI-enabled development tools and lead security evaluations across architectures, data flows, and configurations.

The role requires four+ years in application security or DevSecOps, with programming experience in Java, Python, JavaScript, and SQL, plus relevant certifications.