2355 Information Security Engineer II

Job Description

Job Description

For more than three decades, Strategic Data Systems (SDS) has been a software consultancy firm specializing in strategy, technology, and business transformation for Fortune 100 companies, mid-sized firms, and startups. At SDS, we empower our development teams to address our clients’ critical business challenges by leveraging cutting edge technologies. If you seek a workplace where your contributions are truly appreciated, then SDS is the company for you. Join us today to work alongside fellow development specialists and become a crucial part of our dynamic and cohesive community.

Job Title: Junior DevOps Engineer

Location: REMOTE EST/CST

Years of Experience: 1+

Contract to hire - must be able to convert to FTE w/o sponsorship

TOP SKILLS:

  Must Have

• 1+ year(s) of Gen AI related development preferred!
• DevOps practices and tools (Jenkins, Github, CI/CD, Terraform)
• Python

Nice To Have

• Agile
• Amazon Bedrock
• AWS
• AWS ECS Fargate
• Python
• Security Operations/Principles

What You’ll Do

This role is specifically responsible for the day-to-day operation of an LLM-based code vulnerability detection and reporting capability. The primary focus is run: monitoring, executing runbooks, patching, and resolving defects in the deployed scanner and its pipelines. The role contributes to build and feature work under direction from Lead and Principal Engineers, but is not responsible for solution design. This position is one of four engineers providing rotating coverage for a 24/7 operational capability. Scheduled hours average 40 per week, and alert volume is expected to be low, so shift time not spent on active response is directed toward maintenance, documentation, and assigned engineering tasks. Finding triage and remediation ownership are out of scope for this role.

ESSENTIAL DUTIES & RESPONSIBILITIES:

1. Operate and monitor an LLM-based code vulnerability detection capability on AWS Bedrock, including scanner health, job execution, model invocation errors, and token and cost consumption against defined thresholds.
2. Monitor scanning pipelines integrated with GitHub and Jenkins running on ECS; investigate and resolve failed jobs, queue backlogs, and environment issues.
3. Execute documented runbooks during assigned shift and escalate to Lead or Principal Engineering per established procedures.
4. Perform structured shift handoff, including documentation of open issues, in-flight changes, and outstanding escalations.
5. Apply patches, dependency updates, and configuration changes through established change management processes.
6. Monitor Splunk dashboards and alerts for scanner health, coverage, and throughput; report anomalies and recurring failure patterns.
7. Execute the evaluation harness on a defined cadence and report results; identify regressions in detection performance.
8. Implement assigned changes at the Story level within an established architecture, including Terraform and pipeline configuration updates.
9. Maintain and improve runbooks, operational procedures, and support documentation based on observed incidents.
10. Participate in a four-person rotating shift schedule providing 24/7 coverage, including nights, weekends, and holidays. Scheduled hours average 40 per week.
11. Maintain appropriate controls and documentation to ensure compliance with all company and regulatory requirements.
12. Understand virtualization/containerization technologies.
13. Other duties as assigned.

SUPERVISORY RESPONSIBILITIES: None.

REQUIRED KNOWLEDGE, SKILLS & ABILITIES:

1. 1+ years of related engineering or technical operations experience, including hands-on information security, infrastructure, or software support work.
2. Working knowledge of AWS fundamentals, including console and CLI navigation, IAM basics, and CloudWatch.
3. Ability to read and troubleshoot CI/CD pipeline failures, preferably Jenkins, integrated with GitHub.
4. Ability to read and make guided modifications to Terraform and scripting in Python or equivalent.
5. Basic understanding of application security concepts and common vulnerability classes.
6. Ability to follow documented procedures precisely and escalate appropriately when procedures do not cover the situation.
7. Able to communicate operational status, incidents, and handoff details clearly in writing.
8. Willingness and availability to work an assigned shift within a rotating 24/7 schedule, including nights, weekends, and holidays.
9. Able to work independently during off-hours shifts with limited direct supervision.
10. Eligible to work in the US without the need for sponsorship now or in the future.

PREFERRED KNOWLEDGE, SKILLS & ABILITIES:

1. Prior experience supporting a 24/7 operational environment, including shift handoff and runbook execution.
2. Exposure to AWS Bedrock or equivalent hosted LLM platforms.
3. Hands-on experience with ECS or other container orchestration platforms.
4. Splunk experience, including search and dashboard use.
5. Experience with Linux systems administration.
6. Experience working with ServiceNow or equivalent incident and change management tooling.
7. Experience working in Agile methodologies.
8. Prior experience in a regulated financial services environment.
9. Industry standard certifications such as AWS Cloud Practitioner, AWS Solutions Architect Associate, or CompTIA Security+.

What You’ll Get

SDS, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

• Competitive base salary
• Medical, dental, and vision insurance coverage
• Optional life and disability insurance provided
• 401(k) with a company match and optional profit sharing
• Paid vacation time
• Paid Bench time
• Training allowance offering
• You’ll be eligible to earn referral bonuses!