Lead DevSecOps Engineer
Core
Security lead for AI and LLM-powered products and platforms, ensuring security by design from design review through production.
Role type
Senior IC DevSecOps Engineer (AI/LLM Security)
Builds
Secure AI/LLM products, platform security tooling, and cloud infrastructure for AECOM's infrastructure and building design solutions.
Domain
AI Engineering / Cloud Security / Infrastructure
Deliverable
production ML models
Required skills
Security engineering, threat modelling, vulnerability management, CI/CD security scanning, penetration testing, cloud security (Azure/GCP), incident response, security champions programme
Preferred skills
AI/ML and LLM application security, containerised workloads and supply chain security, security compliance frameworks (NIST, CIS, ISO 27001, SOC 2)
Technologies
GitHub Actions, Terraform, Azure, GCP, SAST, SCA, container scanning, IaC scanning
Responsibilities
Run security reviews and threat modelling for new products; own security for AI/LLM features including prompt injection and data leakage; secure AI supply chain and third-party models; hold security sign-off authority; manage CVE remediation; maintain security scanning tooling in CI/CD; manage penetration testing programme; lead incident response; establish security champions programme
Seniority
Senior, hands-on IC with leadership authority
