Note: The job is a remote job and is open to candidates in USA. Eliassen Group is seeking a DevOps/SRE Engineer to support an Information Security team. The role will build, operate, and improve an LLM-based code vulnerability detection and reporting capability, including its scanner, evaluation harness, CI/CD pipelines, telemetry, and ongoing operational support.
Responsibilities
- Serve as a security engineer and consultant on cloud projects
- Build and operate an LLM-based code vulnerability detection capability on AWS Bedrock, including prompt and agent design, model invocation patterns, cost and token controls, and result normalization
- Develop and maintain the evaluation harness to measure scanner quality, including regression corpora, repeatable test execution, and reporting on detection performance over time
- Build and maintain scanning pipelines integrated with GitHub and Jenkins, deployed to ECS and provisioned through Terraform
- Deliver findings and operational telemetry into Splunk, and build dashboards and alerting for scanner health, coverage, and throughput
- Engineer and implement well-architected solutions while adhering to software development best practices
- Advise Principal Engineers and Product Owners on operations and evolution of their product
- Design, test, and implement solutions at the Feature level
- Support operational information security responsibilities, including development and maintenance of standards, procedures, and guidelines
- Provide ongoing operational support, patching, and defect resolution for the deployed scanner after go-live
- Participate in a four-person rotating shift schedule providing 24/7 coverage, including nights, weekends, and holidays, averaging 40 hours per week
- Maintain appropriate controls and documentation to ensure compliance with company and regulatory requirements
- Understand virtualization and containerization technologies
- Participate in operational on-call rotation within normal working hours
- Perform other duties as assigned
Skills
- • 4+ years of related engineering experience, including hands-on information security or software development work
- • Hands-on experience with AWS Bedrock or equivalent hosted LLM platforms, including model selection, inference optimization, and guardrail configuration
- • Understanding of Infrastructure as Code best practices and strong experience building Terraform modules
- • Experience building and maintaining CI/CD pipelines, preferably Jenkins, integrated with GitHub
- • Working knowledge of application security concepts, common vulnerability classes, and SAST/SCA tooling behavior
- • Clear verbal and written communication skills for management, business sponsors, and technical stakeholders
- • Eligible to work in the US without the need for sponsorship now or in the future
- • Preferred: experience with AWS IAM, ECS, and service-to-service authentication patterns
- • Preferred: experience with agentic or multi-step LLM workflows, including context management across large repositories
- • Preferred: experience with RESTful APIs and event-driven architectures
- • Preferred: Splunk development experience, including data onboarding, search, and dashboarding
- • Preferred: experience with containerized workloads and Linux systems
- • Preferred: experience working in Agile methodologies and development
- • Preferred: prior experience in a regulated financial services environment
- • Preferred: industry certifications such as AWS Security Specialty, AWS Solutions Architect Associate, CompTIA Security+, ISC2 CISSP, or SANS
Benefits
- For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Company Overview