{"id":590551,"url":"https://alion.io/job/physicsx-security-engineer-devsecops-and-security-architect","title":"Security Engineer – DevSecOps and Security Architect","company":{"id":251,"name":"PhysicsX","domain":"physicsx.ai","url":"https://alion.io/company/physicsx","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":39,"ghost_share":0.103,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":119,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":200000,"max":null,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-02-05T16:03:40Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-11-04T19:52:28Z","board_verified":true,"closed_at":null,"days_open":272,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":271},"description":"About us\nRe-architecting Engineering for the Age of Intelligence\n\nPhysicsX is the physics AI company for industrials. The company’s mission is to accelerate hardware innovation by overhauling what industrial engineering and manufacturing look like today. PhysicsX is building a new simulation software stack to deliver deep physics AI enablement across the entire engineering lifecycle. The company partners with leading organisations in aerospace & defence, automotive, semiconductors, materials, and energy & renewables, supporting them on some of their most critical and complex challenges. PhysicsX is headquartered in the United Kingdom, with offices in London, New York, and Singapore and an expanding presence in the Bay Area.\nThe Role\nAs a Principal Security Engineer, you will partner closely with engineering teams to design and implement secure development practices, integrate security into our CI/CD pipeline, and lead security and design reviews.\nYou’ll bring deep expertise in DevSecOps, application security, hands-on experience securing web applications and APIs, and a strong understanding of modern development workflows. This is a unique opportunity to shape the future of our security program while working in a high-ownership, high-impact environment.\nWhat you will do\nArchitect and integrate security tooling directly into CI/CD pipelines to automate the detection and prevention of vulnerabilities, ensuring \"shift-left\" security at scale.\nLead threat modeling and secure design reviews for web applications, APIs, and cloud services.\nOversee the end-to-end product vulnerability lifecycle, from issue triage, prioritization, remediation support, with clear risk communication.\nDrive secure coding standards, develop playbooks, and provide hand-on training and mentorship to instill a security-first mindset across the organization.\nDesign and scale secure development practices by collaborating cross-functionally with engineering teams throughout the entire software lifecycle.\nEngage with customers during security reviews\nWhat you bring to the table\n10+ years in security, with a focus on DevSecOps and security design reviews\nHands-on experience with secure coding, OWASP Top 10, threat modeling, and SDLC integration\nExperience with GitHub/GitLab, CI/CD, IaC, and containerized environments\nExperience deploying and working with SAST tooling (e.g. Semgrep, Snyk)\nExperience developing in Python and Go.\nTrack record of balancing pragmatism and security rigor in a fast-paced setting\nStrong communication skills\nNice to Have Skills\nUnderstanding of AI security fundamentals and how application security and AI security intersect\nExperience securing cloud infrastructure\nParticipation in bug bounty programs and managing security disclosure\nFamiliarity with the BSIMM framework\nExperience in cloud security including identity and access management and cloud-native services.\nWhat we offer\nBuild what actually matters\nHelp shape an AI-native engineering company at a formative stage, tackling problems that genuinely matter for industry and society. This is work with real-world impact - and something you can be proud to stand behind.\nLearn alongside exceptional people\nWork with a high-caliber, collaborative team of engineers, scientists, and operators who care deeply about doing great work, and about helping each other get better. We come from diverse backgrounds, but we share a commitment to operating at the highest level and addressing some of the most complex challenges out there. If you’re ambitious, thoughtful, and driven by impact, you’ll feel at home.\nInfluence over hierarchy\nWe operate with a flat structure: good ideas win - wherever they come from. Questioning assumptions and challenging the status quo isn’t just welcomed, it’s expected.\nSustainable pace, long-term ambition\nBuilding meaningful technology is a marathon, not a sprint. We believe in balancing focused, ambitious work with a life beyond it. Our hybrid model blends time together in our New York office with work-from-home days, giving you the flexibility to work sustainably while staying connected in person.\nUK Benefits:\nEquity options; 10% pension employer contribution; 25 days holiday plus public holidays; private health insurance; enhanced parental leave; free lunch onsite\nUS Benefits:\n Equity options - share meaningfully in the company you’re helping to build.\n 5% contribution to 401(k) - build long-term security with a strong retirement plan.\n Free team lunch 1x/week - good food, great company, and space to connect.\n Private health insurance - comprehensive cover for you, offering total peace of mind.\n Enhanced parental leave - 3 months full pay paternity and 6 months full pay maternity leave, to provide extra flexibility during the moments that matter most.\n 20 days of Annual Leave (+ Public Holidays) - because taking time to rest matters.\n Personal development - dedicated support for learning, development, and leveling up over time.\n Gympass / Wellhub (subsidized) - for you and up to 3 family members, supporting both physical and mental wellbeing.\n Flexible Spending Account (FSA) - set aside pre-tax dollars for eligible healthcare expenses.\n Watch this space, we’re continuing to build this as we grow…\nSalary for this position in the USA is from $200,000 to $300,000\nWe value diversity and are committed to equal employment opportunity regardless of sex, race, religion, ethnicity, nationality, disability, age, sexual orientation or gender identity. We strongly encourage individuals from groups traditionally underrepresented in tech to apply. To help make a change, we sponsor bright women from disadvantaged backgrounds through their university degrees in science and mathematics. \nWe collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application.","description_format":"text","description_chars":6046,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual leave","Equity","Health insurance","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Simulation & Digital Twin Software","Industrial AI","AI for Science"],"lifecycle":[{"event":"open","at":"2026-09-10T10:36:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 7","filings_12m":7,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":202500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.769,"p_room":0.28,"age_days":271,"expected_fill_days":119,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":false},"html_url":"https://alion.io/job/physicsx-security-engineer-devsecops-and-security-architect","json_url":"https://alion.io/job/physicsx-security-engineer-devsecops-and-security-architect.json","meta":{"generated_at":"2026-11-04T21:24:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33169,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":251},"rest":"https://alion.io/mcp/rest/get_company?id=251"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fphysicsx-security-engineer-devsecops-and-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fphysicsx-security-engineer-devsecops-and-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fphysicsx-security-engineer-devsecops-and-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/physicsx-security-engineer-devsecops-and-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fphysicsx-security-engineer-devsecops-and-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":590551}},{"tool":"search_jobs","arguments":{"company":"physicsx.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":590551},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}