Description of the Role

• Responsible for the design, implementation, and operational execution of secure development, cloud, and endpoint security practices

• Embeds information security controls directly into engineering and IT workflows

• Focus on vulnerability management, security baselines, threat modeling, and secure architecture

• Leverages AI capabilities, including AWS AI services and Claude to standardize, streamline, and scale security operations

Essential Functions of the Role

• Design and implement secure architecture patterns across applications, CI/CD pipelines, and cloud platforms

• Conduct threat modeling and security design reviews for new systems and major changes

• Lead vulnerability management across GitHub, AWS Inspector, Microsoft Defender, and CrowdStrike Falcon

• Ensure vulnerabilities are triaged, tracked, and remediated within defined SLAs

• Design and enforce AWS security baselines including VPCs, security groups, and perimeter controls

• Identify and remediate unintended network exposure

• Apply AWS AI services and Claude to standardize vulnerability analysis, remediation workflows, and reporting

• Ensure AI usage is auditable, explainable, and secure

• Develop and maintain security baselines aligned to NIST CSF, SOC 2, and HIPAA where applicable

• Produce audit-ready documentation and metrics

• Partner with Engineering and IT teams to integrate security into delivery processes

• Communicate security risks and remediation status to Information Security leadership

Qualifications

• 8+ years in DevSecOps, security engineering, or cloud security roles

• Bachelor’s degree or equivalent experience in Computer Science, Engineering, or related field

• Strong experience with AWS, GitHub, Microsoft Defender, CrowdStrike Falcon

• Expertise in vulnerability management and threat modeling

• Proficiency using AI tools (AWS AI services, Claude) to improve security operations

• Excellent documentation and communication skills