Note: The job is a remote job and is open to candidates in USA. Software Guidance & Assistance, Inc. is a technology and resource solutions provider seeking a Senior Information Security Engineer for a contract position. The role supports the day-to-day operation, monitoring, maintenance, patching, and troubleshooting of an LLM-based code vulnerability detection capability and its AWS, GitHub, Jenkins, and ECS pipelines. The engineer also executes runbooks, performs shift handoffs, maintains documentation, and provides rotating 24/7 operational coverage.
Responsibilities
- Operate and monitor an LLM-based code vulnerability detection capability on AWS Bedrock, including scanner health, job execution, model invocation errors, and token and cost consumption against defined thresholds
- Monitor scanning pipelines integrated with GitHub and Jenkins running on ECS; investigate and resolve failed jobs, queue backlogs, and environment issues
- Execute documented runbooks during assigned shift and escalate to Lead or Principal Engineering per established procedures
- Perform structured shift handoff, including documentation of open issues, in-flight changes, and outstanding escalations
- Apply patches, dependency updates, and configuration changes through established change management processes
- Monitor Splunk dashboards and alerts for scanner health, coverage, and throughput; report anomalies and recurring failure patterns
- Execute the evaluation harness on a defined cadence and report results; identify regressions in detection performance
- Implement assigned changes at the Story level within an established architecture, including Terraform and pipeline configuration updates
- Maintain and improve runbooks, operational procedures, and support documentation based on observed incidents
- Participate in a four-person rotating shift schedule providing 24/7 coverage, including nights, weekends, and holidays. Scheduled hours average 40 per week
- Maintain appropriate controls and documentation to ensure compliance with all company and regulatory requirements
- Understand virtualization/containerization technologies
- Other duties as assigned
Skills
- 1+ years of related engineering or technical operations experience, including hands-on information security, infrastructure, or software support work
- Working knowledge of AWS fundamentals, including console and CLI navigation, IAM basics, and CloudWatch
- Ability to read and troubleshoot CI/CD pipeline failures, preferably Jenkins, integrated with GitHub
- Ability to read and make guided modifications to Terraform and scripting in Python or equivalent
- Basic understanding of application security concepts and common vulnerability classes
- Ability to follow documented procedures precisely and escalate appropriately when procedures do not cover the situation
- Able to communicate operational status, incidents, and handoff details clearly in writing
- Willingness and availability to work an assigned shift within a rotating 24/7 schedule, including nights, weekends, and holidays
- Able to work independently during off-hours shifts with limited direct supervision
- Prior experience supporting a 24/7 operational environment, including shift handoff and runbook execution
- Exposure to AWS Bedrock or equivalent hosted LLM platforms
- Hands-on experience with ECS or other container orchestration platforms
- Splunk experience, including search and dashboard use
- Experience with Linux systems administration
- Experience working with ServiceNow or equivalent incident and change management tooling
- Experience working in Agile methodologies
- Prior experience in a regulated financial services environment
- Industry standard certifications such as AWS Cloud Practitioner, AWS Solutions Architect Associate, or CompTIA Security+
Benefits
- Remote work arrangement
Company Overview
Company H1B Sponsorship