Security Engineer

About the Role:

The Security Engineer (Secure Development) serves as the primary technical lead for establishing security standards across all internally developed software, automation, and AI solutions before delivery. You will ensure applications, APIs, infrastructure-as-code, and AI models meet strict privacy and compliance requirements.

Key Responsibilities:

• Application & Code Security Governance: Enforce secure development standards; conduct manual/automated code reviews (static/dynamic); establish release gates for customer delivery; define remediation criteria; perform threat modeling during early design phases.
• AI & Emerging Technology Security: Review internally developed AI models, agents, and data pipelines for misuse risk; ensure compliance with contractual obligations and regulatory expectations; implement secure AI development patterns including access controls and auditability.
• DevSecOps Enablement: Integrate SAST/DAST/scanning tools into CI/CD pipelines; promote 'shift-left' security practices; collaborate on secure delivery pipelines.
• Risk, Compliance & IP Protection: Protect intellectual property via controlled access to source code; support SOC 2 and ISO 27001 compliance efforts; produce audit-ready artifacts including risk assessments and sign-offs.
• Leadership & Collaboration: Act as the escalation point for engineering teams; mentor developers on secure coding; provide executive reporting on security posture.