Information Security Engineer IV

OpTech is a woman-owned company that values your ideas, encourages your growth, and always has your back. When you work at OpTech, not only do you get health and dental benefits on the first day of employment, but you also have training opportunities, flexible/remote work options, growth opportunities, 401K and competitive pay. Apply today!

Job Summary

The Information Security Engineer IV is responsible for designing, building, operating, and continuously improving enterprise information security solutions. This role has a strong focus on developing and supporting an LLM-based code vulnerability detection and reporting platform using AWS and modern DevSecOps practices.

The engineer will lead the development of scanning capabilities, evaluation frameworks, CI/CD integrations, infrastructure automation, monitoring, and ongoing production support. The role partners with security, engineering, architecture, and product teams to deliver secure, scalable, and well-engineered solutions.

Key Responsibilities

• Design, build, and operate an LLM-based code vulnerability detection platform using AWS Bedrock, including model selection, prompt/agent design, inference optimization, guardrails, and result normalization.

• Develop evaluation frameworks, regression test suites, and reporting capabilities to measure and continuously improve detection quality.

• Build and maintain secure CI/CD pipelines integrating GitHub and Jenkins, with workloads deployed to AWS ECS and infrastructure managed through Terraform.

• Integrate security findings and operational telemetry with Splunk, including dashboards and alerting for platform health, coverage, and performance.

• Design, test, and implement secure, scalable solutions following software engineering and cloud security best practices.

• Apply Infrastructure as Code and automation principles to improve reliability, repeatability, and operational efficiency.

• Provide technical guidance to engineers, architects, and Product Owners regarding security, operations, and platform evolution.

• Provide ongoing production support, including patching, defect resolution, tuning, and feature enhancements.

• Support enterprise information security standards, procedures, controls, and documentation to meet regulatory and organizational requirements.

• Apply knowledge of application security, vulnerability classes, SAST/SCA concepts, containerization, virtualization, and secure software development practices.

• Participate in an on-call/rotating shift schedule providing 24/7 operational coverage, including nights, weekends, and holidays.

• Identify, assess, and manage security and operational risks in accordance with organizational policies and regulatory requirements.

Required Qualifications

• 4+ years of relevant engineering experience, including hands-on information security or software development.

• Hands-on experience with AWS Bedrock or comparable hosted LLM platforms, including model selection, inference optimization, and guardrail configuration.

• Strong experience with Terraform and Infrastructure as Code practices.

• Experience developing and maintaining CI/CD pipelines, preferably using Jenkins and GitHub.

• Working knowledge of application security, common vulnerability classes, and SAST/SCA tooling.

• Strong verbal and written communication skills with the ability to work effectively across technical and business audiences.

• Ability to work in the U.S. without current or future sponsorship.

Preferred Qualifications

• Hands-on AWS experience with IAM, ECS, and service-to-service authentication.

• Experience with agentic or multi-step LLM workflows and large-codebase context management.

• Experience with RESTful APIs and event-driven architectures.

• Splunk development experience, including data onboarding, search, dashboards, and alerting.

• Experience with containerized workloads and Linux environments.

• Experience working in Agile software development environments.

• Financial services or other regulated-industry experience.

• Relevant certifications such as AWS Security Specialty, AWS Solutions Architect, Security+, CISSP, or SANS.

By submitting your application, you acknowledge that recruiting technologies, including AI-assisted tools, may be used to support candidate evaluation, sourcing, matching, and communications.

OpTech is an Equal Opportunity Employer (EOE), all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

https://www.optechus.com/eeo_self_identification/