Senior DevSecOps Engineer

McDermott, Will & Schulte LLP AI Security Engineer

McDermott, Will & Schulte LLP is standing up enterprise-grade AI-assisted coding platforms, including agentic tools that can independently write, execute, and iterate on code. At the same time, the security team needs its own engineering capability to move beyond ad hoc scripts toward purpose-built tooling and automation. This role sits at that intersection.

WHY MWS

• Build security into a brand-new AI-powered developer environment
• Create the security team's first dedicated engineering capability
• Work with cutting-edge AI coding tools every day
• Shape how the Firm approaches secure AI-assisted development

WHAT YOU'LL DO

• Partner with development teams to build, secure, and govern the Firm's developer environment, including AI-assisted coding platforms
• Define and implement security controls and guardrails for agentic coding tools that autonomously generate, execute, and deploy code
• Integrate security into CI/CD pipelines—automated scanning, dependency analysis, secrets detection, and policy enforcement
• Advise developers on secure coding practices, with particular attention to AI-generated code
• Build custom security tools, scripts, and automation for the Information Security team
• Develop dashboards, reports, and analytical workflows for security monitoring and risk assessment
• Leverage AI tools to enhance security operations, including log analysis, anomaly detection, and threat intelligence

TECHNOLOGIES

Claude Code • AI-Assisted Development • CI/CD Security

Python • JavaScript/TypeScript • Go

SAST/DAST • Secrets Management • Container Security

Jupyter • pandas • SQL • SIEM Platforms

WHAT YOU BRING

• 7+ years in software engineering, DevOps, security engineering, or related discipline
• Strong proficiency in at least one programming language with practical tool-building experience
• Hands-on experience with CI/CD pipelines, infrastructure as code, and modern development workflows
• Solid understanding of application security principles and secure development practices
• Experience with or strong aptitude for AI-assisted development tools
• Ability to work independently and communicate effectively with security and development stakeholders

Preferred

• Experience with data analysis and visualization tools (Jupyter, pandas, SQL)
• Cloud security experience (AWS, Azure, GCP)
• Prior DevSecOps roles or security automation experience
• Familiarity with agentic coding environments and AI-generated code review

Successful candidates will be provided with outstanding career opportunities and will receive a competitive total rewards package with the opportunity to earn performance-based bonuses.

Target Hiring Range $131,000 - $203,000

Please note that quoted salary ranges are not guarantees of what final salary offers may be. Base pay is based on market location and may vary depending on job-related knowledge, skills, experience, and geographic location. Base pay is only one part of the Total Rewards that MWE provides to compensate and recognize our staff professionals for their work. Full time positions are eligible for a discretionary bonus and a comprehensive benefits package.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Physical Demands and Work Environment:

The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Demands:

• While performing the duties of this job, the employee is required to sit, use hands, reach with hands and arms, stoop, talk and hear
• Employee must occasionally lift up to twenty (20) pounds

Work Environment:

Typical indoor office environment

Disclaimer:

The above statements are intended to describe the general nature and level of the work being performed by people within this classification. They are not intended to be an exhaustive list of all responsibilities, duties and skills required of employees assigned to this job.