Senior DevSecOps / Platform Security Engineer - GenAI Delivery
We are looking for an experienced Senior DevSecOps / Platform Security Engineer to join a large GenAI delivery program in the Healthcare/Life Sciences domain. The role focuses on building secure CI/CD pipelines, container security, software supply chain security, and AWS platform security to enable development teams to deliver secure applications. This is a hands-on technical role where you'll work closely with engineering teams to build reusable security solutions and automate security throughout the software development lifecycle.
Responsibilities
- Build and maintain secure CI/CD pipelines using Jenkins
- Implement secret scanning and secure secrets management
- Develop secure Docker images using multi-stage builds and best practices
- Integrate security tools (SAST, SCA, IaC, and container scanning) into CI/CD pipelines
- Improve software supply chain security through dependency management and vulnerability scanning
- Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments
- Resolve TLS/SSL and certificate-related issues
- Create reusable DevSecOps templates and security standards for engineering teams
Requirements
- 8+ years of experience in DevSecOps, Platform Security, or Cloud Security
- Proficiency in Jenkins CI/CD pipelines
- Skills in Python and/or Node.js
- Hands-on experience with Docker and container security
- Knowledge of AWS security services (IAM, Secrets Manager, Parameter Store)
- Experience with secret management and security scanning tools
- Knowledge of SAST, SCA, IaC, and container vulnerability scanning
- Understanding of software supply chain security and dependency management
- Understanding of TLS/SSL and PKI concepts
- Familiarity with AI coding assistants such as Claude Code, Codex, or similar is a plus
- English proficiency at B2 level or higher
Nice to have
- Background in Healthcare, Life Sciences, or other regulated environments
- Exposure to GenAI/LLM platforms such as Amazon Bedrock
- Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories
