Senior DevSecOps Security Architect – SaaS & AI

DigitalBridge; Boca Raton, New York (FL, NY); On-site; USD 235,000 - 290,000; Full time

Job summary

DigitalBridge is seeking a Principal Security Engineer / DevSecOps Lead to own the security posture of SaaS platforms, cloud environments, and AI-enabled apps. You will design secure architectures, embed automated controls, and run red-team-informed testing to reduce real risk.

You will partner with SRE, platform, data, and application teams and report to the CISO to set enterprise standard for secure development.

Qualifications

• 10+ years in information security with DevSecOps and application security expertise.
• Experience designing security for SaaS platforms and multi-cloud environments (AWS and/or Azure) at enterprise scale.
• Strong background in automated vulnerability management and security testing — SAST/DAST/SCA, IaC/CSPM, container/K8s security.
• Demonstrated red-team / offensive security experience: leading engagements and purple-team exercises.
• Deep secure-development expertise: threat modeling, secure code review, cryptography fundamentals, API security.
• Experience securing AI-enabled applications — LLM/agent security and data-provenance controls.
• Hands-on in Python and/or Go; comfortable with Terraform, Kubernetes, and modern CI/CD.

Responsibilities

• Own security architecture for SaaS platforms, multi-cloud environments (AWS/Azure), and AI workloads.
• Build and operate a modern DevSecOps program: SAST, DAST, IaC scanning, SBOM/supply-chain tooling, secrets detection, and policy-as-code (OPA/Cedar).
• Design and run an automated vulnerability management program with risk-based prioritization and SLA-driven closure.
• Lead application security across the SDLC: threat modeling, secure design reviews, code reviews at critical seams.
• Direct red-team and adversarial testing engagements and translate findings into durable architectural fixes.
• Harden multi-tenant isolation, identity, and data protection for regulated buy-side platforms; map controls to SOC 2, SOX, and other regs.
• Set security-by-design standards for AI-enabled applications: prompt-injection defense and model/data provenance controls.
• Collaborate with IT/AI Platform, SRE, and Data Governance on identity, secrets, network segmentation, logging, and incident response; participate in on-call for security incidents.
• Mentor senior engineers and represent security in executive risk reporting as needed.

Skills

DevSecOps

Application security

Security architecture

Python

Go

Terraform

Kubernetes

CI/CD

Threat modeling

Red team / offensive security

Tools

SAST

DAST

IaC scanning

SBOM / supply-chain tooling

Sigstore

SLSA

Secrets detection

OPA / Cedar policy-as-code

Container security

Kubernetes admission control

Job description

DigitalBridge is seeking a Principal Security Engineer / DevSecOps Lead to own the security posture of SaaS platforms, cloud environments, and AI-enabled apps. You will design secure architectures, embed automated controls, and run red-team-informed testing to reduce real risk.

You will partner with SRE, platform, data, and application teams and report to the CISO to set enterprise standard for secure development.