DevSecOps Engineer – AI & Cloud Security

About this role

Meet the Team

Welcome to the AI Strategic Planning Group (AI SPG) on the Cloud Control & AI Canvas team. We are a collaborative, forward-thinking team dedicated to building and securing the next generation of cloud infrastructure and enterprise AI platforms.

Here, security is an enabler of innovation, not a barrier. We believe in a culture of shared ownership, continuous learning, and psychological safety where diverse perspectives thrive. You will partner side-by-side with talented engineers, architects, and product innovators to pioneer secure-by-default cloud designs, agentic AI workflows, and modern DevSecOps practices on a global scale.

Your Impact:

• Build cutting-edge AI agent workflows to automate alert triage, threat modeling, evidence collection, and guided incident response with built-in human-in-the-loop guardrails.
• Design and implement robust, secure-by-default AWS cloud foundations—advancing IAM least privilege, data encryption, network segmentation, and automated guardrails.
• Build seamless CI/CD automation with GitHub Actions, Terraform, and container security tooling (SAST/DAST/SCA, SBOMs, artifact signing) to empower developers to ship fast and securely.
• Partner early with engineering teams to conduct pragmatic threat modeling across microservices, APIs, Kubernetes, and AI/LLM applications.
• Streamline audit readiness and operational workflows for frameworks like SOC 2, FedRAMP, and ISO 27001 using Python, APIs, and Infrastructure-as-Code.

Minimum Qualifications (Must-Have Skills):

We are looking for a DevSecOps Engineer with 7+ years of hands-on experience in Cloud Security, Application Security, or Software Engineering. Bachelor's degree or equivalent practical experience welcome.

• Proven experience securing AWS multi-account environments, including IAM policies, SCPs, WAF, KMS, CloudTrail, GuardDuty, and Security Hub.
• Proven scripting and automation capability in **Python** (or Go/Bash) with hands-on **Terrafo...