Security Analyst III (DevSecOps & Application Security)

Location: Remote

Salary: $85–$90 per hour, W-2

Company

Provides consulting and staffing services for cybersecurity and technology roles.

What you will do

• Develop and mature DevSecOps capabilities across CI/CD pipelines, source-code repositories, artifact repositories, container registries, and release processes.
• Operate and optimize SAST, DAST, software composition analysis, SBOM and AI-BOM, dependency management, container scanning, and vulnerability remediation workflows.
• Conduct security assessments and adversarial testing of AI applications, models, APIs, RAG implementations, agents, coding assistants, and agentic systems.
• Evaluate AI identities, permissions, tools, integrations, data flows, guardrails, logging, observability, and human-oversight controls.
• Support AI governance, technology intake, inventory, third-party provider assessments, security posture management, and risk tracking.
• Partner with development, DevOps, cloud, architecture, Data & AI, Product Security, and governance teams to implement practical security controls.

Requirements

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related discipline, or equivalent professional experience.
• Five or more years of experience in cybersecurity, DevSecOps, application security, product security, software engineering security, cloud security, or AI security.
• Experience with SAST, DAST, software composition analysis, SBOM management, package and dependency management, container scanning, CI/CD security, open-source software security, and vulnerability remediation.
• Working knowledge of LLM and Generative AI architectures, RAG, agentic systems, model APIs, prompt injection, AI supply-chain security, guardrails, observability, and agent permissions.
• Experience with enterprise cloud, development, container, and AI ecosystems such as Azure, Azure DevOps, GitHub Enterprise, GitHub Copilot, AWS, Google Cloud, MLflow, or Azure Databricks.
• Ability to assess unfamiliar technologies, distinguish material risks, and translate findings into remediation requirements, preventive controls, and risk-based recommendations.

Nice to have

• Experience with AI security testing, AI red teaming, Generative AI security, or adversarial testing.
• Familiarity with NIST CSF, NIST AI RMF, NIST SSDF, OWASP application and API security, and OWASP AI and LLM security guidance.
• Certifications such as CISSP, CSSLP, CCSP, GIAC, or cloud security certifications.

Culture & Benefits

• Remote contract engagement for six months.
• W-2 employment with access to medical, dental, and vision benefits.
• 401(k) contributions, PTO, sick leave, and other applicable benefits.