Senior DevSecOps & Security Architect — Hybrid, Equity

PhysicsX Ltd.; New York, Northern (NY, KY); Hybrid; USD 200,000 - 300,000; Full time

Benefits offered by this job

Equity options

Pension contributions

25 days holiday plus public holidays

Private health insurance

Enhanced parental leave

Free lunch onsite

401(k) contribution

Free team lunch 1x/week

Gympass / Wellhub

Flexible Spending Account (FSA)

Job summary

PhysicsX Ltd. in New York, NY, is hiring a Security Engineer to join our DevSecOps and Security Architecture team. The role focuses on integrating security into CI/CD, conducting secure design reviews, and guiding secure development across the product lifecycle.

You will lead security tooling, threat modeling, and vulnerability lifecycle management while mentoring engineers to adopt a security-first mindset within a fast-paced, high-ownership environment. Hybrid work with NYC presence offered.

Qualifications

• 10+ years in security with DevSecOps focus.
• Hands-on secure coding, OWASP Top 10, threat modeling, SDLC integration.
• Experience with GitHub/GitLab, CI/CD, IaC, and containerized environments.

Responsibilities

• Architect and integrate security tooling into CI/CD pipelines to automate vulnerability detection and prevention.
• Lead threat modeling and secure design reviews for web apps, APIs, and cloud services.
• Oversee end-to-end product vulnerability lifecycle with triage, prioritization, remediation support, and risk communication.
• Drive secure coding standards, develop playbooks, and mentor teams to embed security-first mindset.
• Design and scale secure development practices in cross-functional collaboration across the software lifecycle.
• Engage with customers during security reviews.

Skills

DevSecOps

Security design reviews

Secure coding

OWASP Top 10

Threat modeling

CI/CD

IaC

Containerization

SAST tooling

Python

Go

Tools

Semgrep

Snyk

GitHub

GitLab

Job description

PhysicsX Ltd. in New York, NY, is hiring a Security Engineer to join our DevSecOps and Security Architecture team. The role focuses on integrating security into CI/CD, conducting secure design reviews, and guiding secure development across the product lifecycle.

You will lead security tooling, threat modeling, and vulnerability lifecycle management while mentoring engineers to adopt a security-first mindset within a fast-paced, high-ownership environment. Hybrid work with NYC presence offered.