{"id":2651580,"url":"https://alion.io/job/regional-finance-security-ai-devsecops-engineer","title":"Security AI DevSecOps Engineer","company":{"id":4416753,"name":"Regional Finance","domain":"regionalfinance.com","url":"https://alion.io/company/regionalfinance","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":107000,"max_usd":201000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon SageMaker","optional":false},{"name":"Anthropic","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"CloudFormation","optional":false},{"name":"Cosign","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Grype","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubeflow","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"LangChain","optional":false},{"name":"Least Privilege","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MLFlow","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"Sigstore","optional":false},{"name":"Snyk","optional":false},{"name":"Syft","optional":false},{"name":"Terraform","optional":false},{"name":"tfsec","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"Exabeam","optional":true},{"name":"Function Calling","optional":true},{"name":"Multi-Agent Systems","optional":true},{"name":"SIEM","optional":true},{"name":"Splunk","optional":true},{"name":"Tines","optional":true},{"name":"Tool Use","optional":true}],"status":"live","first_seen_at":"2026-09-29T00:00:00Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-16T02:02:45Z","board_verified":true,"closed_at":null,"days_open":17,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":17},"description":"Take your career to the next level! In the last few years our goal has been expansion, creating growth opportunities for many of our team members. Not only are we serious about growth, but we are also serious about helping our customers during hard financial times.\nWe take pride in providing solutions and offering a helping hand, not only to our customers but also to the communities we serve. As we continue to expand and grow into a national leader in consumer financing, we invite you to consider joining our team.\nIf you're passionate about making a meaningful impact in people's lives and bringing a personal touch to finance, we'd love to have you on board!\nJob Purpose\nThe AI Security DevSecOps Engineer is a specialized individual contributor role at the intersection of DevSecOps, AI/ML security, and internal AI development. This person will embed with development teams across the organization to secure CI/CD pipelines and AI development lifecycles end-to-end. In addition to securing how software and AI systems are built and deployed, this engineer will serve as our internal AI developer - designing, building, and orchestrating AI agents that transform how the Security team operates. The ideal candidate is equally comfortable writing a pipeline security gate and building an LLM-powered automation workflow.\nDuties and Responsibilities\nCI/CD & Pipeline Security\nDesign and implement security controls across CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins, Azure DevOps), including SAST, DAST, SCA, container image scanning, and secrets detection.\nDevelop and maintain policy-as-code enforcement using tools such as Open Policy Agent (OPA), Sentinel, or Kyverno to automate security guardrails at pipeline stages.\nEstablish and govern infrastructure-as-code (IaC) security reviews using tools such as Checkov, tfsec, or Bridgecrew across Terraform and CloudFormation environments.\nLead software supply chain security initiatives including SBOM generation (Syft, Grype, etc), artifact signing (Sigstore/Cosign, etc), and dependency governance.\nImplement code security standards and report on compliance to such standards\nEnsure API security is effective and consistent with best practices\nAI/ML Security\nPartner with AI/ML engineering teams to perform threat modeling of LLM-powered applications, model training pipelines, and inference serving layers.\nImplement controls aligned to OWASP LLM Top 10 and MITRE ATLAS, including defenses against prompt injection, data exfiltration, model inversion, and adversarial inputs.\nSecure MLOps workflows including model registries, dataset pipelines, and deployment platforms (e.g., MLflow, Kubeflow, SageMaker).\nEvaluate and advise on AI vendor security posture, third-party model integrations, and emerging AI supply chain risks.\nInternal AI Development & Agent Orchestration\nDesign, build, and maintain internal AI agents and automation workflows that accelerate Security team operations - including alert triage, vulnerability enrichment, threat intelligence correlation, compliance evidence collection, and reporting.\nLeverage LLM APIs (e.g., Anthropic Claude, OpenAI) and orchestration frameworks (e.g., LangChain, LlamaIndex) to build reliable, guardrailed agentic systems.\nEstablish best practices for responsible internal AI development, including prompt governance, output validation, and audit logging of agent actions.\nIdentify and prioritize automation opportunities across the Security team, translating manual workflows into AI-assisted or fully automated pipelines.\nDeveloper Partnership & Security Enablement\nServe as a trusted security partner - not a gatekeeper - embedded with development teams to champion secure-by-default patterns and reduce friction in the SDLC.\nDesign and deliver paved-road security templates, reusable pipeline components, and developer-facing runbooks that make the secure path the easy path.\nFacilitate threat modeling workshops and security design reviews for new products, services, and AI initiatives.\nCommunicate security risks and recommendations effectively to both technical engineers and non-technical stakeholders.\nCloud & Secrets Management\nPartner with Development and Cloud teams to enhance secrets management strategy using tools such as HashiCorp Vault or AWS Secrets Manager, enforcing least-privilege access patterns.\nMonitor and improve cloud security posture (AWS, Azure, or GCP) including network security and container/Kubernetes hardening.\nSupport incident response activities including those related to CI/CD, cloud, or AI-specific threats.\nMetrics & Reporting\nDefine and monitor key security metrics across pipeline security coverage, and AI agent operational health.\nProvide regular reporting on DevSecOps program maturity, AI security posture, and automation impact to security leadership.\nMinimum Qualifications\nEducation & Experience\nBachelor’s degree in Computer Science, Information Security, Information Technology, or a related field.\n4-7 years of security engineering experience, with meaningful tenure in AppSec, DevSecOps, cloud security, or a closely related role.\nDemonstrated hands-on experience securing CI/CD pipelines using modern tooling (Snyk, Semgrep, Checkmarx, Trivy, Checkov, or comparable).\nStrong Python or similar scripting proficiency - this role builds tools, not just configures them.\nWorking knowledge of LLM security risks including prompt injection, jailbreaking, model inversion, data poisoning, and AI supply chain threats.\nExperience building with LLM APIs or AI orchestration frameworks (LangChain, LlamaIndex, or similar).\nCloud security proficiency in AWS, Azure, or GCP covering IAM, network security, secrets management, and container/Kubernetes hardening.\nDemonstrated ability to collaborate cross-functionally with engineering teams and translate security concepts for non-security audiences.\nPreferred Qualifications\nEducation & Experience\nMaster’s degree in Computer Science, Information Security, or a related field.\nExperience with MLOps platforms and securing model registries and training pipelines.\nBackground in agentic AI architectures including multi-agent orchestration, tool use, memory management, and guardrail design.\nExperience with SIEM/SOAR platforms (Splunk, Exabeam, Tines, Torq, or similar) and security data pipelines.\nPreferred Certifications\nCertified Information Systems Security Professional (CISSP)\nOffensive Security Certified Professional (OSCP) or Offensive Security Web Expert (OSWE)\nAWS Certified Security - Specialty or equivalent cloud security certification\nCertified AI Security Professional (CAISP) or comparable emerging AI security credential\nCertified DevSecOps Professional (CDP) or Certified DevSecOps Expert (CDE)\nCritical Competencies\nDeep knowledge of DevSecOps principles, secure SDLC practices, and CI/CD security tooling.\nStrong understanding of AI/ML threat landscapes including OWASP LLM Top 10, MITRE ATLAS, and emerging attack vectors against AI systems.\nAbility to design, build, and operate AI agents and automation workflows in a production security context.\nExcellent written and oral communication skills with the ability to present to technical and executive audiences.\nStrong project management and organizational skills; able to manage multiple initiatives in a fast-paced, collaborative environment.\nAbility to work both collaboratively and independently, and to influence without direct authority.\nIntellectual curiosity and a growth mindset - the AI security landscape evolves rapidly and this role demands continuous learning.\nWorking Conditions\nHybrid work is permitted for this position. Regional has offices in Greenville, SC and Plano, TX available for in-person work. Some travel may be required (less than 10%).\nRegional is an equal opportunity employer and does not discriminate on the basis of race, color, religion, creed, national origin, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity, transgender status, age, disability, genetic information, veteran status, uniform service, or any other characteristic protected by applicable law (“Protected Characteristics”). Regional’s policy of non-discrimination applies to all phases of the employment process and relationship, including, but not limited to, recruitment and selection; compensation and benefits; professional development and training; promotions and opportunities; transfers; social and recreational programs; layoff; and terminations.","description_format":"text","description_chars":8510,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Growth opportunities","Hybrid work","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-15T21:53:46Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.744,"p_room":0.75,"age_days":17,"expected_fill_days":24,"reasons":["conf:1","win:late"],"computed_at":"2026-10-16T03:22:53Z"},"pay":null,"html_url":"https://alion.io/job/regional-finance-security-ai-devsecops-engineer","json_url":"https://alion.io/job/regional-finance-security-ai-devsecops-engineer.json","meta":{"generated_at":"2026-10-16T03:22:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5123,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4416753},"rest":"https://alion.io/mcp/rest/get_company?id=4416753"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fregional-finance-security-ai-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fregional-finance-security-ai-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fregional-finance-security-ai-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/regional-finance-security-ai-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fregional-finance-security-ai-devsecops-engineer"}]}