Security & Agentic AI DevSecOps Engineer

Job Role: Security & Agentic AI DevSecOps Engineer (Product Security) Location: Milpitas, CA (5 days work from office) -Onsite Job Description Role Overview As an AI Security & Agentic AI DevSecOps Engineer, you will act as a handson technical authority responsible for designing and implementing fully automated security controls across the software and AI lifecycle. Your focus will be to ensure that every meaningful security decision is enforced through automation, not manual processes. You will embed security as code, policy as code, and continuous verification into modern software platforms and agentic AI systems, enabling secure innovation at scale across cloud, hybrid, and airgapped environments. Key Responsibilities AI Security & Agentic Systems (AutomationFirst) Design and implement automated Agentic and AI security controlsfor agentic systems, including:Automated model access control, inference authorization, and rate limitingPolicydriven prompt/instruction validation and misuse detectionAutomated enforcement of agenttoagent authentication and authorizationImplement continuous, automated threat modeling for:LLM pipelinesAgent orchestration frameworksAI gateways and inference servicesBuild securebydefault reference architectures where AI guardrails are enforced via:ConfigurationascodeRuntime policy enginesAutomated security testing pipelinesCreate Plugins , Hooks and Skills using claude code and or Microsoft AI foundry DevSecOps & Secure SDLC (EndtoEnd Automation) Implement fully automated Secure SDLC pipelines, integrating:SAST, DAST, SCA, secrets detection, container scanning, and IaC scanningAIspecific security testing (prompt injection, model misuse, data leakage)Automated build and release policy enforcement (fail gates, conditional approvals)Ensure all security checks are:Triggered automatically via CI/CD and MLOps pipelinesEnforced consistently across dev, test, and productionAutomate security validation during:Design reviews (templatedriven controls)Architecture reviews (reusable security patterns)Prerelease readiness checks SBOM, AIBOM & Supply Chain Automation Design and operate automated SBOM and AIBOM pipelines, including:Continuous generation of SBOMs for software, containers, firmware, and artifactsAutomated AIBOMs covering models, datasets, checkpoints, and training artifactsImplement automated vulnerability, license, and provenance analysis:Continuous ingestion of CVEs and advisoriesAutomated policy enforcement for noncompliant componentsIntegrate SBOM and AIBOM outputs into:CI/CD pipelinesDeployment gatesAudit and compliance reporting workflows Runtime Security, Risk & Metrics Automation Implement continuous, automated security monitoringacross:Application runtimesAI/ML inference servicesAgent workflows and interactionsDevelop automated security metrics and telemetry to measure:Vulnerability exposure and remediation velocitySecure SDLC and DevSecOps maturityModel and AI risk posture over timeAutomate security feedback loops so findings:Generate actionable tasksFeed directly into engineering backlogsDrive measurable risk reduction Technical Influence & Enablement Ability and willing to learn,teach and develop agentic AI workflow automation using copilot studio and or Claude codeAct as a technical authority on AI security automation and DevSecOps.Define reusable security automation patterns, templates, and reference implementations.Partner with engineering, AI/ML, platform, and compliance teams to replace manual security workflows with automated controls.Contribute to internal security standards that mandate automation by default.Strong handson experience designing automated Product Security or AI Security systems.Deep knowledge of:Operating systems, infrastructure, cloud platforms, and hybrid environmentsAutomation frameworks and pipelinedriven enforcement modelsAbility to interpret and secure code written in multiple languages, with automation as the primary mitigation strategy.Experience integrating security tooling via APIs and pipelines, not manual review.Familiarity with security intelligence ingestion and automation, including:CVE feedsSecurity advisoriesAutomated alerting and remediation workflowsStrong understanding of cybersecurity, privacy, and AI governance requirements, with experience translating them into automated controls.Ability to concurrently deliver multiple security automation initiatives. Minimum Qualifications Bachelor's degree in Computer Science, Cybersecurity, IT Security, or equivalent experience.Experience in DevOps, SecOps, DevSecOps, or MLOps, with a strong automation focus.Demonstrated success implementing automated Secure SDLC pipelines.Ability to evaluate code and architecture risk and remediate through automation, not policy alone.Familiarity with security frameworks and scoring systems:MITRE Telecommunication&CKCVSSCWEStrong technical communication skills and crossfunctional influence. Thanks & Regards, Preeti sagar US IT Recruiter Direct : +1 609-732-0766 Email:preeti.sagar@applabsystems.com linkedin.com/in/preeti-s-81803216b 4365 Route 1 South, Suite 105 Princeton, NJ 08540 www.applabsystems.com