Senior DevSecOps Engineer

Senior DevSecOps Engineer

As PennEngineering accelerates its Speed of Now transformation (respond in 1 hour, quote in 1 day, samples in 1 week, finished product in 1 month), we are rapidly expanding our cloud-native, AI-powered application portfolio. Delivering at this pace demands that security is not a checkpoint at the end of development, but an engineered capability embedded into every layer of how we build and deploy software.

The Senior DevSecOps Engineer is responsible for building and operating the security guardrails, tooling, and automation that enable PennEngineering's engineering teams to ship code safely at high velocity. This is a hands-on leadership role: part builder, part automator, part platform engineer. You will own the security posture of our global AWS cloud environment and customer-facing platforms, automate the guardrails that protect organizational assets, and ensure that our CI/CD pipelines enforce security by design, without creating friction that slows our teams down.

As PennEngineering's AI application portfolio grows, including AI-powered workflows, agentic systems, and customer-facing digital platforms, this role will play a critical part in implementing, and helping to shape, the security architecture and governance frameworks that allow those systems to operate reliably, safely, and at enterprise scale.

Key Responsibilities:

• Cloud Security Posture & Remediation
• Pipeline Security & CI/CD Integration
• Automated Governance & Policy-as-Code
• Cloud Operations & Threat Response
• Security for AI & Emerging Platforms

Key KPIs

• Vulnerability remediation SLA compliance
• Pipeline security gate effectiveness
• Mean time to detect and respond for security incidents
• Policy-as-code coverage
• Cloud security posture score
• AI workload security coverage

Success in this role means PennEngineering's engineering teams ship code at high velocity with confidence, knowing that automated security guardrails are working in the background, not slowing them down. Security findings are caught earlier in the development cycle, remediated faster, and tracked with full visibility. Our AWS environment maintains a continuously improving posture, and our AI-powered platforms operate under clear, auditable security controls and standards.

The Senior DevSecOps Engineer is successful when security is a competitive enabler for PennEngineering's Speed of Now transformation, not a constraint on it. You are proactive, automation-first, and deeply collaborative. You build relationships with engineering and product teams by making security easy to do correctly, and you bring the same data-driven discipline to security operations that our engineering teams bring to delivery.

Required Qualifications

• 8+ years of experience in cloud security, DevSecOps, or security engineering
• Deep expertise in AWS cloud architecture and security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail
• Proven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity
• Hands-on experience with infrastructure-as-code and policy-as-code approaches using Terraform or AWS CDK
• Strong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically
• Experience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments
• Practical knowledge of vulnerability management, threat modeling, incident response, and security operations in a cloud-native environment
• Demonstrated ability to work as a trusted partner to engineering and product teams, designing security that accelerates rather than blocks delivery
• Excellent communication skills, including the ability to translate technical security risks into business terms for senior leadership
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical field

Preferred Qualifications

• Experience securing AI/LLM-powered systems and contributing to their security architecture, including prompt injection protections, model access controls, output validation, and auditability requirements for agentic applications
• Hands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment
• Familiarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems
• Experience in manufacturing, industrial, or complex B2B technology environments
• Relevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent
• Experience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks
• Background working in a global organization with multi-region cloud deployments

Disclaimer: Brooksource, Medasource, and Calculated Hire are part of the Eight Eleven Group family of companies and operate under Eight Eleven Group, LLC. All employees receive the same benefits, policies, and terms of employment.

EEO: We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital status, military or veteran status, citizenship, pregnancy (including childbirth, lactation, and related conditions), or any other protected status in accordance with applicable federal, state, and local laws.

Benefits & Perks: Eight Eleven Group offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee's needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

Pay Disclaimer: The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.