Senior DevSecOps Engineer

Job Title
:
Senior Dev Sec Ops  Engineer

Location
: US / Remote

Department
:
Digital AI

Reports to
:
Senior Manager, IT Risk, Security & Compliance

As Penn Engineering accelerates its Speed of Now transformation (respond in 1 hour, quote in 1 day, samples in 1 week, finished product in 1 month), we are rapidly expanding our cloud-native, AI-powered application portfolio.

Delivering at this pace demands that security is not a checkpoint at the end of development, but an engineered capability embedded into every layer of how we build and deploy software.

The Senior Dev Sec Ops  Engineer is responsible for building and operating the security guardrails, tooling, and automation that enable Penn Engineering's engineering teams to ship code safely at high velocity.

This is a hands-on leadership role: part builder, part automator, part platform engineer.

You will own the security posture of our global AWS cloud environment and customer-facing platforms, automate the guardrails that protect organizational assets, and ensure that our CI/CD pipelines enforce security by design, without creating friction that slows our teams down.

As Penn Engineering's AI application portfolio grows, including AI-powered workflows, agentic systems, and customer facing digital platforms, this role will play a critical part in implementing, and helping to shape, the security architecture and governance frameworks that allow those systems to operate reliably, safely, and at enterprise scale.

• Continuously assess, harden, and elevate the security posture of Penn Engineering's AWS cloud infrastructure, covering both customer-facing platforms and internal enterprise systems
• Design and build custom security tools, frameworks, and policies tailored to protect Penn Engineering's internal and external organizational assets
• Own the end-to-end vulnerability management lifecycle, including triage, tracking, prioritization, and automated remediation of identified vulnerabilities and cloud misconfigurations
• Establish a continuous posture improvement program with defined baselines, remediation SLAs, and executive level reporting on security health

• Design and implement automated security scanning (SAST, SCA, and DAST), embedded directly into CI/CD pipelines, ensuring checks are high-fidelity and low-latency to support our daily deployment cadence
• Configure pre-commit hooks, pull request checks, and branch protection rules that automatically detect and block secrets, misconfigurations, or vulnerable dependencies before they reach production
• Partner with AI engineering teams to secure AI/LLM workloads within the pipeline, including prompt injection protections, model input/output validation, and agentic system guardrails
• Establish security gate standards and developer-friendly documentation so engineering teams understand what is enforced, why, and how to resolve failures quickly

• Replace manual security audits with automated policy enforcement using infrastructure-as-code tools (Terraform, AWS Config), ensuring non-compliant infrastructure cannot be provisioned
• Build event-driven automation to detect and auto-remediate common security issues in near real-time, reducing mean time to respond across the environment
• Define and maintain security governance standards, including access controls, secrets management, encryption policies, and data classification frameworks
• Establish audit-ready documentation and evidence collection practices to support internal compliance reviews and external assessments

• Maintain the operational security health of Penn Engineering's AWS environment, using…