Job Description

• Hybrid at least two days a month onsite
• Must be in BC

This is a senior Security Engineer role that will join our client's DevSecOps team.

This role will drive the GenAI security strategy, enhance Cloud application security policies in Azure, assist with maturing the security engineering program, develop security tooling, mentor others in DevSecOps team and be a hands-on partner to our development teams to deliver innovative and secure applications.

General Role (s) , Specific Responsibilities and Deliverables:

• Partnering with architecture, application, security, and operational teams to identify security patterns, requirements and drive security on AI and Cloud application projects.
• Research new security threats for GenAI systems and mechanisms for defending against such threats, to continuously improve our security guidance and solutions.
• Collaborate with cloud engineers and application developers to build automated tooling and solutions that support teams throughout their software development journey.
• Defining security controls for implementation of platforms using AI/ML using a combination of Cloud-native and On-Premises Security tools and applications.
• Conducting security reviews and recommendations for IaaS, PaaS, & SaaS Cloud environments, cloud applications and AI solutions
• Developing Cloud Security requirements and policies for IaaS, PaaS, and CaaS environments built using Terraform
• Designing and implementing security controls and policies with Microsoft Defender suite, Microsoft security center, and equivalent security tools for Cloud applications.
• Document security guardrails for AI and cloud application security and build the knowledge within the team of security engineers.

Requirements

• Undergraduate degree in Computer Science or STEM (Science, Technology, Engineering or Math)
• A minimum of 7 years work experience in progressively complex roles focused on information security and secure application development
• A minimum of 1 year experience in securing GenAI solutions
• Demonstrated subject matter expertise in Application Security, API security, GenAI/LLM security
• Programming expertise – C#, Python, Agile SDLC processes
• In depth experience with threat modeling, secure code reviews, and penetration testing
• Experience architecting and leading security for Cloud native applications in Azure
• Demonstrated expertise in product/application security architecture, network security, application security, web services, Angular, JavaScript