Description of the RoleResponsible for the design, implementation, and operational execution of secure development, cloud, and endpoint security practicesEmbeds information security controls directly into engineering and IT workflowsFocus on vulnerability management, security baselines, threat modeling, and secure architectureLeverages AI capabilities, including AWS AI services and Claude to standardize, streamline, and scale security operationsEssential Functions of the RoleDesign and implement secure architecture patterns across applications, CI/CD pipelines, and cloud platformsConduct threat modeling and security design reviews for new systems and major changesLead vulnerability management across GitHub, AWS Inspector, Microsoft Defender, and CrowdStrike FalconEnsure vulnerabilities are triaged, tracked, and remediated within defined SLAsDesign and enforce AWS security baselines including VPCs, security groups, and perimeter controlsIdentify and remediate unintended network exposureApply AWS AI services and Claude to standardize vulnerability analysis, remediation workflows, and reportingEnsure AI usage is auditable, explainable, and secureDevelop and maintain security baselines aligned to NIST CSF, SOC 2, and HIPAA where applicableProduce audit-ready documentation and metricsPartner with Engineering and IT teams to integrate security into delivery processesCommunicate security risks and remediation status to Information Security leadershipQualifications8+ years in DevSecOps, security engineering, or cloud security rolesBachelor’s degree or equivalent experience in Computer Science, Engineering, or related fieldStrong experience with AWS, GitHub, Microsoft Defender, CrowdStrike FalconExpertise in vulnerability management and threat modelingProficiency using AI tools (AWS AI services, Claude) to improve security operationsExcellent documentation and communication skills
14 days ago