Information Security Engineer IV (Code Security Engineer)

Role: Information Security Engineer IV
Location: Remote

Role Summary

Looking for an Information Security Engineer with strong GenAI/LLM, AWS, DevOps, and application security experience to build and support an LLM-based code vulnerability detection and reporting platform.

Must Have Skills

1+ year GenAI/LLM development experience

AWS Bedrock or equivalent hosted LLM platform

Security / Application Security

Terraform / Infrastructure as Code

Jenkins & GitHub

CI/CD pipelines

SAST/SCA and common application vulnerabilities

Strong software development and engineering experience

Experience with cloud/security engineering

Nice to Have

AWS IAM

AWS ECS / Fargate

Python

Splunk

REST APIs

Event-driven architecture

Agentic / multi-step LLM workflows

Docker / containerization

Linux

Agile

Financial services experience

AWS Security Specialty / Solutions Architect / Security+ / CISSP / SANS

Key Responsibilities

Build an LLM-based vulnerability scanner using AWS Bedrock

Design prompts, agents, model invocation, guardrails, and token/cost controls

Develop an evaluation framework to measure scanner accuracy

Build CI/CD pipelines using Jenkins, GitHub, Terraform, and ECS

Integrate security findings and telemetry with Splunk

Support, patch, tune, and enhance the scanner after deployment

Work with security, engineering, and product teams

Participate in a 24/7 rotating four-person shift schedule

Critical Screening Questions

1. How many years of GenAI/LLM development experience do you have?

2. Have you worked hands-on with AWS Bedrock? What did you build?

3. Describe your experience building LLM-based security or vulnerability scanning solutions.

4. How strong is your Terraform experience?

5. Have you built Jenkins/GitHub CI/CD pipelines?

6. What experience do you have with SAST, SCA, and application vulnerabilities?

7. Have you worked with AWS ECS/Fargate?

8. What is your experience with Splunk?