Lead Cloud Security/AppSec Engineer
Core
Building Flagship's cloud security and application security engineering practice, embedding security into engineering pipelines, and designing AI-augmented security workflows.
Role type
Lead Cloud Security/AppSec Engineer
Builds
Cloud security posture management, CI/CD security guardrails, cloud-side DLP controls, and AI-augmented security automation.
Domain
Biotechnology / Cloud Security / AI Security
Deliverable
production ML models | infrastructure
Required skills
Cloud security posture management, CI/CD pipeline security (SAST/DAST/SCA), Cloud identity and access management (Entra/Azure AD), Infrastructure as code (Python, Terraform), LLM API integration and prompt engineering, Detection engineering, AI workflow automation.
Preferred skills
AWS Security Specialty certification, HIPAA technical safeguard experience, Container and Kubernetes security (EKS), ML/AI platform security (Bedrock, SageMaker).
Technologies
AWS (Security Hub, GuardDuty, IAM, SCPs, CloudTrail), Wiz, Entra/Azure AD, Python, Terraform, LLM APIs, Bedrock, EKS.
Responsibilities
Define and execute cloud security posture management and remediation playbooks; design and implement security guardrails in engineering pipelines; build and operationalize cloud-side data loss prevention controls; manage cloud identity and access governance; write and tune cloud-side detection rules; contribute to security architecture for AI-powered products; serve as an embedded security partner to portfolio engineering teams.
Seniority
Senior, hands-on IC
