Senior DevSecOps / Platform Security Engineer - GenAI Delivery

We are looking for an experienced Senior DevSecOps / Platform Security Engineer to join a large GenAI delivery program in the Healthcare/Life Sciences domain. The role focuses on building secure CI/CD pipelines, container security, software supply chain security, and AWS platform security to enable development teams to deliver secure applications. This is a hands-on technical role where you'll work closely with engineering teams to build reusable security solutions and automate security throughout the software development lifecycle.

Responsibilities

• Build and maintain secure CI/CD pipelines using Jenkins
• Implement secret scanning and secure secrets management
• Develop secure Docker images using multi-stage builds and best practices
• Integrate security tools such as SAST, SCA, IaC, and container scanning into CI/CD pipelines
• Improve software supply chain security through dependency management and vulnerability scanning
• Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments
• Resolve TLS/SSL and certificate-related issues
• Create reusable DevSecOps templates and security standards for engineering teams

Requirements

• 5+ years of experience in DevSecOps, Platform Security, or Cloud Security
• Strong experience with Jenkins CI/CD pipelines
• Proficiency in Python and/or Node.js
• Hands-on experience with Docker and container security
• Strong knowledge of AWS security services, including IAM, Secrets Manager, and Parameter Store
• Experience with secret management and security scanning tools
• Knowledge of SAST, SCA, IaC, and container vulnerability scanning
• Understanding of software supply chain security and dependency management
• Understanding of TLS/SSL and PKI concepts
• Experience using AI coding assistants such as Claude Code, Codex, or similar is a plus

Nice to have

• Background in Healthcare, Life Sciences, or other regulated environments
• Exposure to GenAI/LLM platforms such as Amazon Bedrock
• Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories