Information Security Engineer IV (Code Security Engineer)

Role: Information Security Engineer IV Location: Remote Role Summary Looking for an Information Security Engineer with strong GenAI/LLM, AWS, DevOps, and application security experience to build and support an LLM-based code vulnerability detection and reporting platform. Must Have Skills 1+ year GenAI/LLM development experience AWS Bedrock or equivalent hosted LLM platform Security / Application Security Terraform / Infrastructure as Code Jenkins & GitHub CI/CD pipelines SAST/SCA and common application vulnerabilities Strong software development and engineering experience Experience with cloud/security engineering

Nice to Have

AWS IAM AWS ECS / Fargate Python Splunk REST APIs Event-driven architecture Agentic / multi-step LLM workflows Docker / containerization Linux Agile Financial services experience AWS Security Specialty / Solutions Architect / Security+ / CISSP / SANS

Key Responsibilities

Build an LLM-based vulnerability scanner using AWS Bedrock Design prompts, agents, model invocation, guardrails, and token/cost controls Develop an evaluation framework to measure scanner accuracy Build CI/CD pipelines using Jenkins, GitHub, Terraform, and ECS Integrate security findings and telemetry with Splunk Support, patch, tune, and enhance the scanner after deployment Work with security, engineering, and product teams Participate in a 24/7 rotating four-person shift schedule Critical Screening Questions 1. How many years of GenAI/LLM development experience do you have? 2. Have you worked hands-on with AWS Bedrock? What did you build? 3. Describe your experience building LLM-based security or vulnerability scanning solutions. 4. How strong is your Terraform experience? 5. Have you built Jenkins/GitHub CI/CD pipelines? 6. What experience do you have with SAST, SCA, and application vulnerabilities? 7. Have you worked with AWS ECS/Fargate? 8. What is your experience with Splunk?