DevSecOps Engineer

Description of the Role - Responsible for the design, implementation, and operational execution of secure development, cloud, and endpoint security practices - Embeds information security controls directly into engineering and IT workflows - Focus on vulnerability management, security baselines, threat modeling, and secure architecture - Leverages AI capabilities, including AWS AI services and Claude to standardize, streamline, and scale security operations Essential Functions of the Role - Design and implement secure architecture patterns across applications, CI/CD pipelines, and cloud platforms - Conduct threat modeling and security design reviews for new systems and major changes - Lead vulnerability management across GitHub, AWS Inspector, Microsoft Defender, and CrowdStrike Falcon - Ensure vulnerabilities are triaged, tracked, and remediated within defined SLAs - Design and enforce AWS security baselines including VPCs, security groups, and perimeter controls - Identify and remediate unintended network exposure - Apply AWS AI services and Claude to standardize vulnerability analysis, remediation workflows, and reporting - Ensure AI usage is auditable, explainable, and secure - Develop and maintain security baselines aligned to NIST CSF, SOC 2, and HIPAA where applicable - Produce audit-ready documentation and metrics - Partner with Engineering and IT teams to integrate se...