Sr. Dev SecOps Engineer
Mondo · Danboro, PA
Apply & track with Apply EdgeBenefits
Health, Dental, Vision, 401K, PTO, Tuition ReimbursementVisa Sponsorship: Not eligible for visa sponsorship
Job Description
This hands-on architect-level role is responsible for building and operating the security architecture that enables the client's engineering teams to ship code safely at high velocity, with a critical focus on securing a growing AI-powered application portfolio.Job Summary
- Design and implement automated security scanning (SAST, SCA, DAST) embedded directly into CI/CD pipelines to maintain high deployment velocity without sacrificing security coverage
- Continuously assess, harden, and elevate the security posture of the client's AWS cloud infrastructure across customer-facing and internal enterprise systems
- Build event-driven, policy-as-code automation to detect and auto-remediate common security issues in near real-time, replacing manual audit processes
- Define the security architecture for AI-powered applications, including data access controls, model governance, prompt safety, and auditability for agentic systems
- Own the end-to-end vulnerability management lifecycle, including triage, prioritization, tracking, and automated remediation of vulnerabilities and cloud misconfigurations
- Collaborate with infrastructure, AI engineering, and IS teams to integrate threat response practices across the full technology stack
- Define and lead security incident response playbooks, root-cause analyses, and post-incident reviews to drive systemic improvementsMinimum Requirements:
- 8+ years of experience in cloud security, DevSecOps, or security engineering
- Deep expertise in AWS security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail
- Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity
- Hands-on experience with infrastructure-as-code and policy-as-code using Terraform or AWS CDK
- Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically
- Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field
Preferred Qualifications
- Experience defining security architecture for AI/LLM-powered systems, including prompt injection protections, model access controls, output validation, and auditability for agentic applications
- Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment
- Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems
- Relevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent
- Experience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks
- Background working in a global organization with multi-region cloud deployments