Senior Security Engineer, AI & DevSecOps

We believe in a world where growth thrives across borders and cultures. Our mission is to guide companies on their journey by providing services and technology that enables global talent management and delivers a human experience. As an Employer-of-Record (EOR) provider, we offer the HR and compliance infrastructure essential for companies to expand internationally. We take care of the complex, behind-the-scenes work, allowing companies to focus on the strategies that drive their success. We are For People, By People. The future of work is borderless, and so are we. Our people are located around the globe — in the U.S., the UK, India, Colombia, China, and beyond. Diversity and belonging are not just values, they are who we are. We are also committed to making a positive impact. Through our Environment, Social, and Governance (ESG) impact initiative, we are addressing our environmental footprint and promoting social responsibility. Our impact program is central to our vision and culture, focusing on employee wellness, diversity, charitable work, and ethical corporate governance. If you are interested in working in a people-centric, global organization, apply below. Role Overview We are seeking a forward-thinking Senior Security Engineer, AI & DevSecOps to help shape the future of secure AI adoption across the organization. As part of the Information Security team, you will build and secure the platforms, processes, and governance that enable developers and business teams to safely leverage artificial intelligence. You'll work at the intersection of AI, application security, cloud security, and DevSecOps. This role is ideal for someone who thrives on emerging technologies, understands how modern platforms connect through APIs and automation, and can translate security requirements into scalable, developer-friendly solutions. Key Responsibilities Design and implement secure architectures for enterprise AI platforms, AI assistants, AI APIs, and AI-enabled applications. Build and maintain a secure AI sandbox environment supporting experimentation and responsible AI adoption. Develop security guardrails for AI-assisted development, including AI-generated code, vibe coding, AI agents, and AI workflows. Evaluate new AI technologies and recommend secure adoption strategies based on business needs and risk. Integrate security throughout the Secure Software Development Lifecycle (SSDLC) using automated controls and developer-friendly workflows. Integrate SAST, DAST, SCA, secret scanning, IaC scanning, and cloud security scanning into CI/CD pipelines. Secure cloud-native applications, APIs, containers, and AI services across Azure, AWS, and GCP. Review AI applications, integrations, and AI-generated solutions prior to production deployment. Perform AI security assessments, threat modeling, and architecture reviews. Support vulnerability management, incident response, and threat detection involving AI platforms and cloud services. Support change management, configuration management, documentation, and audit evidence. Support ISO/IEC 27001, 27017, 27018, and future AI governance initiatives. Partner with engineering teams to enable secure development while minimizing friction. Continuously research emerging AI technologies, threats, and best practices. Required Qualifications 7–12+ years of experience in cybersecurity, application security, DevSecOps, cloud security, platform engineering, or related disciplines. Demonstrated experience securing enterprise AI platforms, AI APIs, AI-assisted development tools, or LLM ecosystems. Deep understanding of modern AI security concepts, including prompt injection, data leakage, AI supply chain risks, and responsible AI practices. Strong understanding of how cloud platforms, APIs, identity, data, and AI services integrate to deliver secure enterprise solutions. Experience integrating security into modern software delivery pipelines using automated testing and policy enforcement. Hands-on experience with application security, cloud security, vulnerability management, and developer security platforms. Experience implementing IAM, Zero Trust principles, logging, monitoring, and security automation. Experience supporting governance frameworks including ISO/IEC 27001, 27017, 27018, NIST CSF, or SOC 2. Strong automation and scripting skills using Python, PowerShell, Bash, or REST APIs. Excellent communication skills, with the ability to translate security requirements into practical engineering solutions. Preferred Qualifications Experience securing AI agents, MCP integrations, RAG solutions, vector databases, or AI orchestration platforms. Experience implementing AI governance programs and enterprise AI security standards. Experience performing threat modeling, application security assessments, and architecture reviews. Experience supporting internal and external compliance audits. Professional certifications such as CISSP, CCSP, CISM, Azure Security Engineer Associate, or AWS Certified Security – Specialty. Tools & Technologies Experience with one or more of the following is preferred: Source Control & CI/CD: GitHub Enterprise, GitHub Actions, Azure DevOps, GitLab, Jenkins Application Security: GitHub Advanced Security, SonarQube, SonarCloud, Snyk, Checkov, DefectDojo Cloud Security: Wiz, Microsoft Defender for Cloud, Microsoft Defender XDR, Microsoft Sentinel, SentinelOne Cloud Platforms: Microsoft Azure, AWS, Google Cloud Platform (GCP) Identity & Access: Microsoft Entra ID Data Protection: Microsoft Purview, Microsoft Defender for Cloud Apps, Microsoft Intune AI Platforms: ChatGPT Enterprise, Microsoft Copilot, Google Gemini, Claude, Azure AI Foundry, AI agents, MCP integrations Automation: Python, PowerShell, Bash, REST APIs This position description may not describe all duties, responsibilities, and skills associated with this position. It is intended to portray the major aspects of the job. Other duties or skills may be required. What We Offer The opportunity to work with a purpose — simplifying global expansion across borders and cultures A diverse and inclusive environment Country-specific benefits Flexible PTO Your birthday off and a day for you to volunteer and give back to the organization of your choice Generous Parental Leave Program Growth and development opportunities with access to a top learning content provider The opportunity to challenge yourself in a high-performing organization and leave each day knowing you have made an impact. Atlas Technology Solutions, Inc. (Atlas HXM) is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Atlas HXM is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Atlas HXM are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Atlas HXM will not tolerate discrimination or harassment based on any of these characteristics. Atlas HXM encourages applicants of all ages. Atlas HXM will provide accommodation on request throughout the recruitment, selection and assessment process for applicants with disabilities. Hiring decisions are based upon Atlas HXM’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, and location. This role will be subject to a background check under local law after an employment offer has been made. Employment may be subject to results. In addition, references may be requested at the final stage of the process. Atlas HXM will only email candidates from an “@atlashxm.com” email address. Candidates should ignore communications purporting to be from Atlas HXM that originate from any other email address. Atlas HXM will never ask candidates or employees to purchase gift cards or otherwise make payments in connection with applying for a job with Atlas HXM.

Design and implement secure architectures for enterprise AI platforms and integrate security controls throughout the software development lifecycle. The role involves establishing AI security guardrails and securing cloud-native applications across Azure, AWS, and GCP.

Requires 7-12+ years of experience in cybersecurity, DevSecOps, or cloud security with a deep understanding of LLM ecosystems and AI security risks. Proficiency in automation scripting and experience with governance frameworks like ISO 27001 or NIST CSF are essential.

• Country-specific benefits • Flexible PTO • Birthday off • Volunteer day • Generous Parental Leave Program • Growth and development opportunities

Identified from the job description. Confirm important requirements above.

• AI Security
• DevSecOps
• Cloud Security
• Application Security
• Secure Software Development Lifecycle (SSDLC)
• Threat Modeling
• Vulnerability Management
• IAM
• Zero Trust
• Python
• PowerShell
• Bash
• REST APIs
• ISO/IEC 27001
• CI/CD Pipelines
• Architecture Review
• Environmental Social And Corporate Governance (ESG)
• Compliance Auditing
• Medical History Documentation
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Google Gemini
• Microsoft Copilot
• ChatGPT
• Responsible AI
• Pipelines
• Cloud Services
• Vector Database
• Microsoft Certified: Azure Security Engineer Associate
• Certified Cloud Security Professional (CCSP)
• CI/CD
• Supply Chain
• Microsoft Sentinel
• NIST Cybersecurity Framework (CSF)
• Workflow Management
• AWS Certified Security Specialty
• Talent Management
• Cloud-Native Applications
• Threat Detection
• AI-Generated Code
• Technology Solutions
• AI Adoption
• Emerging Technologies
• Google Cloud Platform (GCP)
• Technology Ecosystems
• Ethical Standards And Conduct
• AI Agents
• Azure DevOps
• Research
• Application Programming Interface (API)

• Security & Safety
• Technology
• Software
• Engineering
• Data & Analytics
• DevSecOps Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

Minimum education

Professional degree

Minimum experience

12+ years

Posting language

English

Working hours

40 hours per week