Senior DevSecOps / Platform Security Engineer - GenAI Delivery

Description

We are looking for an experienced Senior DevSecOps / Platform Security Engineer to join a large GenAI delivery program in the Healthcare/Life Sciences domain. The role focuses on building secure CI/CD pipelines, container security, software supply chain security, and AWS platform security to enable development teams to deliver secure applications. This is a hands-on technical role where you'll work closely with engineering teams to build reusable security solutions and automate security throughout the software development lifecycle. Responsibilities Build and maintain secure CI/CD pipelines using Jenkins Implement secret scanning and secure secrets management Develop secure Docker images using multi-stage builds and best practices Integrate security tools such as SAST, SCA, IaC, and container scanning into CI/CD pipelines Improve software supply chain security through dependency management and vulnerability scanning Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments Resolve TLS/SSL and certificate-related issues Create reusable DevSecOps templates and security standards for engineering teams Requirements 5+ years of experience in DevSecOps, Platform Security, or Cloud Security Strong experience with Jenkins CI/CD pipelines Proficiency in Python and/or Node.js Hands-on experience with Docker and container security Strong knowledge of AWS security services, including IAM, Secrets Manager, and Parameter Store Experience with secret management and security scanning tools Knowledge of SAST, SCA, IaC, and container vulnerability scanning Understanding of software supply chain security and dependency management Understanding of TLS/SSL and PKI concepts Experience using AI coding assistants such as Claude Code, Codex, or similar is a plus Nice to have Background in Healthcare, Life Sciences, or other regulated environments Exposure to GenAI/LLM platforms such as Amazon Bedrock Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories

Requirements

• 5+ years of experience in DevSecOps, Platform Security, or Cloud Security

• Strong experience with Jenkins CI/CD pipelines

• Proficiency in Python and/or Node.js

• Hands-on experience with Docker and container security

• Strong knowledge of AWS security services, including IAM, Secrets Manager, and Parameter Store

• Experience with secret management and security scanning tools

• Knowledge of SAST, SCA, IaC, and container vulnerability scanning

• Understanding of software supply chain security and dependency management

• Understanding of TLS/SSL and PKI concepts

• Experience using AI coding assistants such as Claude Code, Codex, or similar is a plus

Responsibilities

• Build and maintain secure CI/CD pipelines using Jenkins

• Implement secret scanning and secure secrets management

• Develop secure Docker images using multi-stage builds and best practices

• Integrate security tools such as SAST, SCA, IaC, and container scanning into CI/CD pipelines

• Improve software supply chain security through dependency management and vulnerability scanning

• Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments

• Resolve TLS/SSL and certificate-related issues

• Create reusable DevSecOps templates and security standards for engineering teams

Seniority

• Senior

Nice to have

• Background in Healthcare, Life Sciences, or other regulated environments

• Exposure to GenAI/LLM platforms such as Amazon Bedrock

• Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories