What the role covers :

- Security scanning and hardening of CI/CD pipelines for agent and platform releases including Jenkins.

- LLM-specific security testing - prompt injection scanning (Promptfoo, Garak, DeepTeam), adversarial testing, output validations

- Infrastructure security across EKS, Snowflake, Salesforce, and the hybrid execution environment

- TPA compliance scanning and remediation governance

- Agent configuration security - CLAUDE.md audits, MCP server vetting, Developer environment hardening

- Vulnerability management, dependency scanning, and secrets management

Profile we're looking for :

- 12-14+ years' experience in DevSecOps and Application Security

- Strong in CI/CD security (GitHub Actions, container security, Kubernetes/EKS hardening)

- Familiarity with LLM/AI security tooling - this is important given OWASP LLM Top 10 is now the standard framework.

- Python proficiency (our agent stack is Python-native - FastAPI, LangGraph, LangChain)

- Experience with compliance frameworks relevant to pharma (HIPAA, SOX, FDA)

- Experience with Snowflake security, Salesforce Shield and HashiCorp Vault