Job Description:

On behalf of our public sector client, Affinity is looking for a Senior Security Engineer to join the DevSecOps team working with Enterprise development, Innovation, Common Engineering, and Operations teams to identify application, infrastructure, and system-level technology security risks, identify and evaluate critical failure points, determine security controls and policies to mitigate risks, prioritize and schedule controls within application delivery timelines, and work with cross-functional teams to implement remediations.

Responsibilities:

• Partnering with architecture, application, security, and operational teams to identify security patterns, and requirements and drive security on AI and Cloud application projects.

• Research new security threats for GenAI systems and mechanisms for defending against such threats, to continuously improve our security guidance and solutions.

• Collaborate with cloud engineers and application developers to build automated tooling and solutions that support teams throughout their software development journey.

• Defining security controls for implementing platforms using AI/ML utilizing a combination of Cloud-native and On-Premises Security tools and applications.

• Conducting security reviews and recommendations for IaaS, PaaS, & SaaS Cloud environments, cloud applications and AI solutions

• Developing Cloud Security requirements and policies for IaaS, PaaS, and CaaS environments built using Terraform

• Designing and implementing security controls and policies with Microsoft Defender suite, Microsoft Security Center, and equivalent security tools for Cloud applications.

• Document security guardrails for AI and cloud application security and build knowledge within the team of security engineers.

Qualifications:

• Undergraduate degree in Computer Science or STEM (Science, Technology, Engineering or Math)

• A minimum of 10 years work experience in progressively complex roles focused on information security and secure application development

• A minimum of 1 year experience in securing GenAI solutions

• Demonstrated subject matter expertise in Application Security, API security, GenAI/LLM security

• Programming expertise – C#, Python, Agile SDLC processes

• In-depth experience with threat modeling, secure code reviews, and penetration testing

• Experience architecting and leading security for Cloud-native applications in Azure

• Demonstrated expertise in product/application security architecture, network security, application security, web services, Angular, JavaScript

Preferred qualifications:

• Expertise in the security of Gen AI models, including multi-modal models

• Experience in performing penetration testing for GenAI models and related solutions

• Experience with the security of automation built around Gen AI inputs and outputs

• Knowledge of Azure cloud architecture, Azure Defender, and Azure security center policies.

• Experience in defining and documenting security reference architectures and standards

• Experience with automation tools associated with Azure DevOps and CI/CD pipelines, and with security tools integration into CI/CD

• Experience in automation of security controls for Azure, and CI/CD pipelines

• Experience with SAST/DAST/SCA tools like BurpSuite, Mend

• Knowledge of Secure SDLC frameworks such as NIST SSDF, OpenSAMM, BSIMM

Hourly rate: $80-$100

Affinity Earn:

Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/

About Affinity:

Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 12102