DevSecOps & Product Security Engineer
Core
Embed security across the software development and deployment lifecycle for modern SaaS and AI-enabled platforms, with a key focus on Stratpilot, an AI-powered business platform.
Role type
Senior IC DevSecOps & Product Security Engineer
Builds
AI-enabled SaaS platforms (Stratpilot) integrating with enterprise systems
Domain
SaaS, AI/LLM security, Cloud Security
Deliverable
production ML models | product features | infrastructure
Required skills
DevSecOps, Application/API Security, Google Cloud (GCP) security, CI/CD security, Python, React, OWASP Top 10, Threat modelling, Vulnerability management, Incident response, Security automation
Preferred skills
AI platform security, SaaS integrations, PostgreSQL security, Infrastructure-as-Code, Kubernetes security, SIEM, SOC 2/ISO 27001, LLM/Agent security
Technologies
Google Cloud, GitHub Actions, Python, React, CodeQL, Semgrep, SonarQube, Dependabot, Trivy, OWASP ZAP, Burp Suite, PostgreSQL, Kubernetes
Responsibilities
Implement security checks and quality gates across the SDLC; Review authentication, authorization, APIs, and access controls; Assess AI agents, prompts, and data-access risks; Secure Google Cloud environments and CI/CD pipelines; Establish vulnerability management and incident response processes; Maintain audit-ready security evidence and support compliance activities
Seniority
Mid-Senior, hands-on IC
