{"schemaVersion":"jobsearcher.job.v1","id":"726f82b93bf52769fa1b1a4b","url":"https://jobsearcher.com/jobs/726f82b93bf52769fa1b1a4b","canonicalUrl":"https://jobsearcher.com/jobs/726f82b93bf52769fa1b1a4b","title":"Sr Developer Security Operations Engineer","description":"At PennEngineering, we innovate and collaborate to make the world a better place. You can contribute to work that matters with a company where diversity, equity and belonging are shared values. We're committed to fostering an environment for every employee that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.\n\nPennEngineering is seeking a motivated, excited, individual to be a part of Information Systems Team. As the Senior Developer Security Operations Engineer at PennEngineering, you'll collaborate with teams that do truly amazing things.\n\nJoin us as we build the future in Manufacturing and Engineering!\n\nPerks and Benefits:\n\nMedical & Employer Paid: Dental and Vision\nParental Leave\n401k and Employer Match\nPaid time off and holidays\nTuition reimbursement\nCommunity Volunteering\nTalent Referral Bonus Program\nOnsite Fitness Center\nEmployee Centric Culture\nCompany Provided Technology (laptop, phone, monitors for office and home environment)\n\nWHAT YOU WILL DO:\n\nAbout the Role\n\nAs PennEngineering accelerates its Speed of Now transformation (respond in 1 hour, quote in 1 day, samples in 1 week, finished product in 1 month), we are rapidly expanding our cloud-native, AI-powered application portfolio. Delivering at this pace demands that security is not a checkpoint at the end of development, but an engineered capability embedded into every layer of how we build and deploy software.\n\nThe Senior DevSecOps Engineer is responsible for building and operating the security guardrails, tooling, and automation that enable PennEngineering's engineering teams to ship code safely at high velocity. This is a hands-on leadership role: part builder, part automator, part platform engineer. You will own the security posture of our global AWS cloud environment and customer-facing platforms, automate the guardrails that protect organizational assets, and ensure that our CI/CD pipelines enforce security by design, without creating friction that slows our teams down.\n\nAs PennEngineering's AI application portfolio grows, including AI-powered workflows, agentic systems, and customer-facing digital platforms, this role will play a critical part in implementing, and helping to shape, the security architecture and governance frameworks that allow those systems to operate reliably, safely, and at enterprise scale.\n\nKey Responsibilities\n\nCloud Security Posture & Remediation\n\nContinuously assess, harden, and elevate the security posture of PennEngineering's AWS cloud infrastructure, covering both customer-facing platforms and internal enterprise systems\nDesign and build custom security tools, frameworks, and policies tailored to protect PennEngineering's internal and external organizational assets\nOwn the end-to-end vulnerability management lifecycle, including triage, tracking, prioritization, and automated remediation of identified vulnerabilities and cloud misconfigurations\nEstablish a continuous posture improvement program with defined baselines, remediation SLAs, and executive-level reporting on security health\n\nPipeline Security & CI/CD Integration\n\nDesign and implement automated security scanning (SAST, SCA, and DAST), embedded directly into CI/CD pipelines, ensuring checks are high-fidelity and low-latency to support our daily deployment cadence\nConfigure pre-commit hooks, pull request checks, and branch protection rules that automatically detect and block secrets, misconfigurations, or vulnerable dependencies before they reach production\nPartner with AI engineering teams to secure AI/LLM workloads within the pipeline, including prompt injection protections, model input/output validation, and agentic system guardrails\nEstablish security gate standards and developer-friendly documentation so engineering teams understand what is enforced, why, and how to resolve failures quickly\n\nAutomated Governance & Policy-as-Code\n\nReplace manual security audits with automated policy enforcement using infrastructure-as-code tools (Terraform, AWS Config), ensuring non-compliant infrastructure cannot be provisioned\nBuild event-driven automation to detect and auto-remediate common security issues in near real-time, reducing mean time to respond across the environment\nDefine and maintain security governance standards, including access controls, secrets management, encryption policies, and data classification frameworks\nEstablish audit-ready documentation and evidence collection practices to support internal compliance reviews and external assessments\n\nCloud Operations & Threat Response\n\nMaintain the operational security health of PennEngineering's AWS environment, using automation to manage scaling events, configuration drift, and self-healing infrastructure\nOperationalize CrowdStrike and Zscaler telemetry by automating the correlation of security alerts to reduce noise and trigger rapid, automated response workflows\nDefine and own security incident response playbooks; lead root-cause analysis and post-incident reviews to drive systemic improvements\nCollaborate with IS, infrastructure, and AI engineering teams to ensure threat response practices are integrated across the full technology stack\n\nSecurity for AI & Emerging Platforms\n\nHelp define, and own the implementation of, the security architecture for PennEngineering's AI-powered application portfolio, including data access controls, model governance, prompt safety, and auditability for agentic systems\nEvaluate and advise on security posture for new platforms, tools, and third-party integrations as the technology portfolio evolves\nPartner with the Principal Systems Architect and AI engineering teams to embed security requirements into solution designs from the earliest stages\nStay current on emerging threats relevant to AI systems, cloud-native architectures, and manufacturing/industrial environments, and translate findings into actionable security guidance\n\nKey KPIs\n\nVulnerability remediation SLA compliance: % of identified vulnerabilities resolved within defined timeframes by severity tier\nPipeline security gate effectiveness: % of CI/CD pipelines with automated security scanning enabled; false-positive rate maintained below threshold to avoid developer friction\nMean time to detect and respond (MTTD / MTTR) for security incidents across the cloud environment\nPolicy-as-code coverage: % of infrastructure provisioned through automated, policy-enforced pipelines vs. manual processes\nCloud security posture score: continuous improvement trend against defined baseline using AWS Security Hub or equivalent\nAI workload security coverage: % of AI-powered applications and agentic systems operating under defined security standards\n\nLocation: Danboro, PA (hybrid)\n\n#LI-BS1\n\nRequirements:\n\nRequired Qualifications\n\n8+ years of experience in cloud security, DevSecOps, or security engineering\nDeep expertise in AWS cloud architecture and security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail\nProven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity\nHands-on experience with infrastructure-as-code and policy-as-code approaches using Terraform or AWS CDK\nStrong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically\nExperience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments\nPractical knowledge of vulnerability management, threat modeling, incident response, and security operations in a cloud-native environment\nDemonstrated ability to work as a trusted partner to engineering and product teams, designing security that accelerates rather than blocks delivery\nExcellent communication skills, including the ability to translate technical security risks into business terms for senior leadership\nBachelor's degree in Computer Science, Information Security, Engineering, or a related technical field\n\nPreferred Qualifications\n\nExperience securing AI/LLM-powered systems and contributing to their security architecture, including prompt injection protections, model access controls, output validation, and auditability requirements for agentic applications\nHands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment\nFamiliarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems\nExperience in manufacturing, industrial, or complex B2B technology environments\nRelevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent\nExperience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks\nBackground working in a global organization with multi-region cloud deployments\n\nPennEngineering is committed to Diversity, Equity and Belonging, and we welcome applicants from all backgrounds and experiences. We are an equal opportunity employer and prohibit discrimination and harassment based on race, color, religion, national origin, ancestry, disability, sex, gender identity or expression, sexual orientation, military or veteran status, or any other characteristic protected by applicable law. We lift up voices and opinions by creating a respectful work environment where difference is valued, and we are doing our part to build towards a greater society where diverse points of view are celebrated.\n\nCompensation: $140,000.00","company":"Penn Engineering","rawCompany":"penn engineering","city":"Doylestown","state":"PA","isRemote":false,"isActive":false,"createdAt":"2026-10-18T08:46:37.067Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Sr Developer Security Operations Engineer","description":"At PennEngineering, we innovate and collaborate to make the world a better place. You can contribute to work that matters with a company where diversity, equity and belonging are shared values. We're committed to fostering an environment for every employee that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.\n\nPennEngineering is seeking a motivated, excited, individual to be a part of Information Systems Team. As the Senior Developer Security Operations Engineer at PennEngineering, you'll collaborate with teams that do truly amazing things.\n\nJoin us as we build the future in Manufacturing and Engineering!\n\nPerks and Benefits:\n\nMedical & Employer Paid: Dental and Vision\nParental Leave\n401k and Employer Match\nPaid time off and holidays\nTuition reimbursement\nCommunity Volunteering\nTalent Referral Bonus Program\nOnsite Fitness Center\nEmployee Centric Culture\nCompany Provided Technology (laptop, phone, monitors for office and home environment)\n\nWHAT YOU WILL DO:\n\nAbout the Role\n\nAs PennEngineering accelerates its Speed of Now transformation (respond in 1 hour, quote in 1 day, samples in 1 week, finished product in 1 month), we are rapidly expanding our cloud-native, AI-powered application portfolio. Delivering at this pace demands that security is not a checkpoint at the end of development, but an engineered capability embedded into every layer of how we build and deploy software.\n\nThe Senior DevSecOps Engineer is responsible for building and operating the security guardrails, tooling, and automation that enable PennEngineering's engineering teams to ship code safely at high velocity. This is a hands-on leadership role: part builder, part automator, part platform engineer. You will own the security posture of our global AWS cloud environment and customer-facing platforms, automate the guardrails that protect organizational assets, and ensure that our CI/CD pipelines enforce security by design, without creating friction that slows our teams down.\n\nAs PennEngineering's AI application portfolio grows, including AI-powered workflows, agentic systems, and customer-facing digital platforms, this role will play a critical part in implementing, and helping to shape, the security architecture and governance frameworks that allow those systems to operate reliably, safely, and at enterprise scale.\n\nKey Responsibilities\n\nCloud Security Posture & Remediation\n\nContinuously assess, harden, and elevate the security posture of PennEngineering's AWS cloud infrastructure, covering both customer-facing platforms and internal enterprise systems\nDesign and build custom security tools, frameworks, and policies tailored to protect PennEngineering's internal and external organizational assets\nOwn the end-to-end vulnerability management lifecycle, including triage, tracking, prioritization, and automated remediation of identified vulnerabilities and cloud misconfigurations\nEstablish a continuous posture improvement program with defined baselines, remediation SLAs, and executive-level reporting on security health\n\nPipeline Security & CI/CD Integration\n\nDesign and implement automated security scanning (SAST, SCA, and DAST), embedded directly into CI/CD pipelines, ensuring checks are high-fidelity and low-latency to support our daily deployment cadence\nConfigure pre-commit hooks, pull request checks, and branch protection rules that automatically detect and block secrets, misconfigurations, or vulnerable dependencies before they reach production\nPartner with AI engineering teams to secure AI/LLM workloads within the pipeline, including prompt injection protections, model input/output validation, and agentic system guardrails\nEstablish security gate standards and developer-friendly documentation so engineering teams understand what is enforced, why, and how to resolve failures quickly\n\nAutomated Governance & Policy-as-Code\n\nReplace manual security audits with automated policy enforcement using infrastructure-as-code tools (Terraform, AWS Config), ensuring non-compliant infrastructure cannot be provisioned\nBuild event-driven automation to detect and auto-remediate common security issues in near real-time, reducing mean time to respond across the environment\nDefine and maintain security governance standards, including access controls, secrets management, encryption policies, and data classification frameworks\nEstablish audit-ready documentation and evidence collection practices to support internal compliance reviews and external assessments\n\nCloud Operations & Threat Response\n\nMaintain the operational security health of PennEngineering's AWS environment, using automation to manage scaling events, configuration drift, and self-healing infrastructure\nOperationalize CrowdStrike and Zscaler telemetry by automating the correlation of security alerts to reduce noise and trigger rapid, automated response workflows\nDefine and own security incident response playbooks; lead root-cause analysis and post-incident reviews to drive systemic improvements\nCollaborate with IS, infrastructure, and AI engineering teams to ensure threat response practices are integrated across the full technology stack\n\nSecurity for AI & Emerging Platforms\n\nHelp define, and own the implementation of, the security architecture for PennEngineering's AI-powered application portfolio, including data access controls, model governance, prompt safety, and auditability for agentic systems\nEvaluate and advise on security posture for new platforms, tools, and third-party integrations as the technology portfolio evolves\nPartner with the Principal Systems Architect and AI engineering teams to embed security requirements into solution designs from the earliest stages\nStay current on emerging threats relevant to AI systems, cloud-native architectures, and manufacturing/industrial environments, and translate findings into actionable security guidance\n\nKey KPIs\n\nVulnerability remediation SLA compliance: % of identified vulnerabilities resolved within defined timeframes by severity tier\nPipeline security gate effectiveness: % of CI/CD pipelines with automated security scanning enabled; false-positive rate maintained below threshold to avoid developer friction\nMean time to detect and respond (MTTD / MTTR) for security incidents across the cloud environment\nPolicy-as-code coverage: % of infrastructure provisioned through automated, policy-enforced pipelines vs. manual processes\nCloud security posture score: continuous improvement trend against defined baseline using AWS Security Hub or equivalent\nAI workload security coverage: % of AI-powered applications and agentic systems operating under defined security standards\n\nLocation: Danboro, PA (hybrid)\n\n#LI-BS1\n\nRequirements:\n\nRequired Qualifications\n\n8+ years of experience in cloud security, DevSecOps, or security engineering\nDeep expertise in AWS cloud architecture and security services, including IAM, Security Hub, GuardDuty, Config, KMS, VPC design, and CloudTrail\nProven experience integrating automated security tooling (SAST, SCA, DAST) into modern CI/CD pipelines without degrading deployment velocity\nHands-on experience with infrastructure-as-code and policy-as-code approaches using Terraform or AWS CDK\nStrong scripting and automation skills in Python, Go, or Bash, with the ability to build custom security tools and integrate systems programmatically\nExperience securing containerized workloads including Docker, Kubernetes, and ECS/EKS deployments\nPractical knowledge of vulnerability management, threat modeling, incident response, and security operations in a cloud-native environment\nDemonstrated ability to work as a trusted partner to engineering and product teams, designing security that accelerates rather than blocks delivery\nExcellent communication skills, including the ability to translate technical security risks into business terms for senior leadership\nBachelor's degree in Computer Science, Information Security, Engineering, or a related technical field\n\nPreferred Qualifications\n\nExperience securing AI/LLM-powered systems and contributing to their security architecture, including prompt injection protections, model access controls, output validation, and auditability requirements for agentic applications\nHands-on experience operationalizing CrowdStrike and Zscaler in an enterprise environment\nFamiliarity with Model Context Protocol (MCP) and emerging security considerations for tool-use in agentic AI systems\nExperience in manufacturing, industrial, or complex B2B technology environments\nRelevant certifications: AWS Security Specialty, CISSP, CCSP, or equivalent\nExperience contributing to or leading security programs in support of SOC 2, ISO 27001, or similar compliance frameworks\nBackground working in a global organization with multi-region cloud deployments\n\nPennEngineering is committed to Diversity, Equity and Belonging, and we welcome applicants from all backgrounds and experiences. We are an equal opportunity employer and prohibit discrimination and harassment based on race, color, religion, national origin, ancestry, disability, sex, gender identity or expression, sexual orientation, military or veteran status, or any other characteristic protected by applicable law. We lift up voices and opinions by creating a respectful work environment where difference is valued, and we are doing our part to build towards a greater society where diverse points of view are celebrated.\n\nCompensation: $140,000.00","datePosted":"2026-10-18T08:46:37.067Z","dateModified":"2026-10-18T08:46:37.067Z","hiringOrganization":{"@type":"Organization","name":"Penn Engineering","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Doylestown","addressRegion":"PA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"726f82b93bf52769fa1b1a4b"},"url":"https://jobsearcher.com/jobs/726f82b93bf52769fa1b1a4b"}}