Senior DevSecOps Engineer: Cloud Security & AI

PennEngineering®; Danboro (PA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical & Dental/Vision coverage

401k with employer match

Paid time off & holidays

Volunteer opportunities

Referral bonus program

Onsite fitness center

Employee-centric culture

Company provided technology (laptop,手机

Job summary

PennEngineering is seeking a Senior DevSecOps Engineer to design and operate security guardrails across our cloud-native portfolio. You will own the security posture of our AWS environment and CI/CD pipelines, embedding security by design and enabling rapid software delivery.

You will partner with AI teams to secure AI/LLM workloads and help shape governance frameworks for enterprise-scale platforms, driving threat prevention and automated responses.

Qualifications

• 8+ years of experience in cloud security, DevSecOps, or security engineering.
• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• Proven experience integrating automated security tooling into CI/CD pipelines.
• Hands-on with infrastructure-as-code and policy-as-code approaches.

Responsibilities

• Design, build, and operate security guardrails and tooling to enable high-velocity software delivery.
• Own security posture of AWS cloud environments and customer-facing platforms.
• Implement automated governance with policy-as-code and real-time remediation.
• Develop and enforce security gate standards and developer-friendly documentation.
• Collaborate with AI engineers to secure AI/LLM workloads within pipelines.

Skills

Cloud security

DevSecOps

Security engineering

Python scripting

AWS security services

CI/CD security tooling

Vulnerability management

Communication with leadership

Education

Bachelor's degree in Computer Science/Engineering

Tools

Terraform

AWS CDK

Docker/Kubernetes

CrowdStrike

Zscaler

SAST/DAST/ SCA

Job description

PennEngineering is seeking a Senior DevSecOps Engineer to design and operate security guardrails across our cloud-native portfolio. You will own the security posture of our AWS environment and CI/CD pipelines, embedding security by design and enabling rapid software delivery.

You will partner with AI teams to secure AI/LLM workloads and help shape governance frameworks for enterprise-scale platforms, driving threat prevention and automated responses.