Senior DevSecOps / Platform Security Engineer - GenAI Delivery

We are looking for an experiencedSenior DevSecOps / Platform Security Engineer to join a large GenAI delivery program in the Healthcare/Life Sciences domain. The role focuses on building secure CI/CD pipelines, container security, software supply chain security, and AWS platform security to enable development teams to deliver secure applications. This is a hands-on technical role where you'll work closely with engineering teams to build reusable security solutions and automate security throughout the software development lifecycle.

Responsibilities

• Build and maintain secure CI/CD pipelines using Jenkins
• Implement secret scanning and secure secrets management
• Develop secure Docker images using multi-stage builds and best practices
• Integrate security tools (SAST, SCA, IaC, and container scanning) into CI/CD pipelines
• Improve software supply chain security through dependency management and vulnerability scanning
• Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments
• Resolve TLS/SSL and certificate-related issues
• Create reusable DevSecOps templates and security standards for engineering teams

Requirements

• 8+ years of experience in DevSecOps, Platform Security, or Cloud Security
• Proficiency in Jenkins CI/CD pipelines
• Skills in Python and/or Node.js
• Hands-on experience with Docker and container security
• Knowledge of AWS security services (IAM, Secrets Manager, Parameter Store)
• Experience with secret management and security scanning tools
• Knowledge of SAST, SCA, IaC, and container vulnerability scanning
• Understanding of software supply chain security and dependency management
• Understanding of TLS/SSL and PKI concepts
• Familiarity with AI coding assistants such as Claude Code, Codex, or similar is a plus
• English proficiency at B2 level or higher

Nice to have

• Background in Healthcare, Life Sciences, or other regulated environments
• Exposure to GenAI/LLM platforms such as Amazon Bedrock
• Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories