Senior Security Analyst: AI & Cloud DevSecOps

O2 Technologies,Inc; Clifton Heights (Delaware County); On-site; USD 90,000 - 120,000; Full time

Job summary

O2 Technologies,Inc is seeking an experienced security engineer to lead secure software development, SBOM/AI-BOM governance and vulnerability management across cloud and SaaS environments.

Responsibilities include strengthening AI security, conducting open-source governance, and ensuring compliance with CSF/SSDF, OWASP guidance, and container scanning. A strong background in cloud security and DevSecOps is required.

Qualifications

• Experience in secure software development and governance practices.
• Proficiency with cloud platforms and DevSecOps tooling.
• Strong understanding of SBOM and AI risk management.

Responsibilities

• Lead secure SDLC processes and SBOM/AI-BOM governance.
• Implement vulnerability management across cloud and SaaS apps.
• Ensure compliance with CSF, SSDF and OWASP guidance.
• oversee container scanning, SCA and dependency management.
• Advance AI security, red-team activities and prompt-injection mitigations.

Skills

Application Security

AI Security

Vulnerability Management

SDLC

SCA

SBOM Management

AI-BOM Management

Package & Dependency Management

Container Image Scanning

CI/CD Security

Open-source Governance

AI Red Teaming

Generative AI Security

Prompt Injection Mitigation

RAG Security

CSF Compliance

SSDF Compliance

OWASP App Security

OWASP API Security

OWASP AI & LLM Security Guidance

Education

Bachelor's Degree in Cybersecurity

Master's Degree in Cybersecurity or CS

PhD in CS or Cybersecurity

Tools

Azure

Azure DevOps

GitHub Enterprise

Copilot Studio

Azure Databricks

MLflow

AWS

GCP

CI/CD Tools

Container Scanning Tools

SAST Tools

DAST Tools

SBOM Generation Tools

Artifact Repositories

Container Registries

Python

Job description

O2 Technologies,Inc is seeking an experienced security engineer to lead secure software development, SBOM/AI-BOM governance and vulnerability management across cloud and SaaS environments.

Responsibilities include strengthening AI security, conducting open-source governance, and ensuring compliance with CSF/SSDF, OWASP guidance, and container scanning. A strong background in cloud security and DevSecOps is required.