Sr Security Engineer

Summary

Seeking a senior‑level Dev Sec Ops  / Application Security Engineer to embed security into modern development environments, focusing on code repository governance, CI/CD pipeline security, and AI‑driven application risk. This role drives secure‑by‑default engineering practices, policy automation, and developer enablement across the organization.

• Embed security controls into CI/CD pipelines, code repositories, and developer workflows
• Implement policy‑as‑code, code integrity, and supply chain security controls
• Secure code repositories (Git Hub/Git Lab/Azure Dev Ops) including access controls and commit validation
• Drive secure development practices and prevent data/code leakage (Git Hub misuse, DLP risks)
• Evaluate and mitigate AI‑related risks in development; support secure AI application design
• Build security automation, monitoring, and risk detection across pipelines
• Ensure encryption, secrets management, and secure data handling
• Partner cross‑functionally with engineering, infrastructure, and GRC teams to enforce governance

• 7+ years in Dev Sec Ops  / Application Security / Security Engineering
• Strong experience with CI/CD security (SAST, DAST, SCA, secrets scanning)
• Expertise in code repository security & governance
• Experience with policy‑as‑code (OPA, Azure Policy, AWS Config, etc.)
• Knowledge of software supply chain security & SBOM
• Hands‑on scripting (Python, Bash, Power Shell)

• Identity & Access Management (IAM)
• Experience securing AI/ML or GenAI applications

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre‑tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked‑in state/locality.