Senior DevSecOps and AI Security Engineer

Pay Range: $50.00hr - $55.00hr

Job Overview:

The organization is looking for an experienced Senior DevSecOps & AI Security Engineer to strengthen enterprise security across applications, cloud-native platforms, DevSecOps pipelines, and AI/LLM-based solutions. The ideal candidate will have deep expertise in application security, offensive security testing, vulnerability management, secure code reviews, cloud security, and emerging AI security practices. This role will partner with engineering, architecture, product, and leadership teams to embed security throughout the Software Development Lifecycle (SDLC) and MLOps lifecycle while enabling secure innovation.

Primary Skills:

• Application Security (SAST, DAST, Secure Code Review).
• Penetration Testing (Web, API, Mobile).
• AI/LLM Security (Prompt Injection, Jailbreak Testing, Model Security).
• DevSecOps & CI/CD Security.
• Vulnerability Management & Remediation.
• Security Automation using Python.

Secondary Skills:

• Azure Cloud Security.
• Container & Kubernetes Security.
• SCA & Open-Source Security.
• GitHub Security Controls.
• Threat Modeling & Risk Assessment.
• Security Governance & Developer Enablement.

Security Assessment & Testing:

• Perform penetration testing across web, API, mobile, cloud-native, and AI-powered applications.
• Conduct secure code reviews and identify security weaknesses in enterprise applications.
• Validate findings from SAST, DAST, SCA, and container security platforms.
• Execute vulnerability analysis, root cause investigation, and remediation validation.

AI Security Engineering:

• Assess AI and LLM-based applications for security vulnerabilities and misuse scenarios.
• Conduct prompt injection, prompt manipulation, and jailbreak testing.
• Evaluate AI deployment architectures and recommend security controls.
• Support secure AI adoption initiatives across enterprise platforms.

DevSecOps & Security Automation:

• Integrate security controls into CI/CD pipelines and deployment workflows.
• Implement shift-left security practices across engineering teams.
• Automate security validation and reporting using Python and modern security tooling.
• Optimize vulnerability assessment workflows and remediation tracking.
• Enhance security monitoring and policy enforcement across development environments.

Cloud & Container Security:

• Perform Azure cloud security assessments.
• Review Kubernetes and containerized workloads for security risks.
• Analyze container images and deployment configurations.
• Recommend cloud-native security best practices and remediation actions.

Vulnerability Management & Governance:

• Review and validate vulnerabilities identified by enterprise security tools.
• Prioritize findings based on exploitability, business risk, and operational impact.
• Perform root cause analysis and drive remediation efforts with engineering teams.
• Track security findings through closure and verify remediation effectiveness.
• Support security governance, compliance requirements, and audit activities.

Stakeholder Engagement:

• Work closely with development, DevOps, architecture, and product teams.
• Provide guidance on secure coding, vulnerability remediation, and security best practices.
• Mentor engineering teams on security-first development approaches.
• Present security findings and recommendations to business and technical stakeholders.

Required Qualifications:

• Bachelor's or master's degree in computer science, Information Security, Cyber Security, or related discipline.
• 6+ years of experience in Application Security, DevSecOps, Offensive Security, or Security Engineering.
• Strong understanding of SDLC, SSDLC, DevSecOps, and MLOps practices.
• Hands-on experience with penetration testing, secure code reviews, and vulnerability management.
• Experience securing cloud-native and AI-enabled applications.
• Strong scripting and automation experience using Python.
• Certified Information Systems Security Professional (CISSP).
• Certified Secure Software Lifecycle Professional (CSSLP).
• Microsoft Azure Security Engineer (AZ-500).
• Certified DevSecOps Professional.
• Cloud Security Certifications (Azure/AWS).

Benefits:

Our Benefits Include:

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities

Disclaimer: Benefits eligibility, accrual rates, and usage limits may vary based on employment status, length of service, and work location. Paid Sick Leave is provided in strict accordance with applicable state and municipal mandates. Cynet Systems Inc. reserves the right to modify, amend, or terminate any benefit plans at any time in accordance with applicable laws.

About Cynet Systems

Founded in 2010 and headquartered in the Washington, DC metro area, Cynet Systems Inc. is a leading technology staffing and workforce solutions company serving Fortune 500 companies, government agencies, and enterprise organizations across the United States and Canada. We deliver agile, scalable talent solutions across IT, engineering, life sciences, clinical, and professional staffing, powered by a high-performing recruitment engine operating across North America and Asia.

As a nationally and locally certified Minority Business Enterprise (MBE), Cynet Systems is committed to helping organizations build high-performing teams while empowering professionals to grow rewarding careers. Our organization is certified to ISO 9001, ISO 14001, ISO 27001, and SOC 2 Type II standards, reflecting our commitment to quality, security, operational excellence, and customer success.