Senior Security Engineer, AI & DevSecOps

Atlas HXM is the global workforce platform built on compliance. We help companies determine how to engage each member of their workforce and then execute with accountability built in — direct Employer of Record (EOR), Agent of Record (AOR), payroll, and compliance capabilities backed by a decade of practitioner-led expertise. Recognized as a category Leader by NelsonHall and Everest Group, Atlas HXM builds Human Experience Management into everything we do, guided by our "For People, by People" principle.

The future of work is borderless, and so are we. Our people are located around the globe — in the U.S., the UK, India, Colombia, China, and beyond. Diversity and belonging are not just values; they are who we are.

We are also committed to making a positive impact. Through our Environment, Social, and Governance (ESG) impact initiative, we are addressing our environmental footprint and promoting social responsibility. Our impact program is central to our vision and culture, focusing on employee wellness, diversity, charitable work, and ethical corporate governance.

Role Overview

We are seeking a forward-thinking Senior Security Engineer, AI & DevSecOps to help shape the future of secure AI adoption across the organization.

As part of the Information Security team, you will build and secure the platforms, processes, and governance that enable developers and business teams to safely leverage artificial intelligence. You'll work at the intersection of AI, application security, cloud security, and DevSecOps.

This role is ideal for someone who thrives on emerging technologies, understands how modern platforms connect through APIs and automation, and can translate security requirements into scalable, developer-friendly solutions.

Key Responsibilities

• Design and implement secure architectures for enterprise AI platforms, AI assistants, AI APIs, and AI-enabled applications.
• Build and maintain a secure AI sandbox environment supporting experimentation and responsible AI adoption.
• Develop security guardrails for AI-assisted development, including AI-generated code, vibe coding, AI agents, and AI workflows.
• Evaluate new AI technologies and recommend secure adoption strategies based on business needs and risk.
• Integrate security throughout the Secure Software Development Lifecycle (SSDLC) using automated controls and developer-friendly workflows.
• Integrate SAST, DAST, SCA, secret scanning, IaC scanning, and cloud security scanning into CI/CD pipelines.
• Secure cloud-native applications, APIs, containers, and AI services across Azure, AWS, and GCP.
• Review AI applications, integrations, and AI-generated solutions prior to production deployment.
• Perform AI security assessments, threat modeling, and architecture reviews.
• Support vulnerability management, incident response, and threat detection involving AI platforms and cloud services.
• Support change management, configuration management, documentation, and audit evidence.
• Support ISO/IEC 27001, 27017, 27018, and future AI governance initiatives.
• Partner with engineering teams to enable secure development while minimizing friction.
• Continuously research emerging AI technologies, threats, and best practices.

Required Qualifications

• 7–12+ years of experience in cybersecurity, application security, DevSecOps, cloud security, platform engineering, or related disciplines.
• Demonstrated experience securing enterprise AI platforms, AI APIs, AI-assisted development tools, or LLM ecosystems.
• Deep understanding of modern AI security concepts, including prompt injection, data leakage, AI supply chain risks, and responsible AI practices.
• Strong understanding of how cloud platforms, APIs, identity, data, and AI services integrate to deliver secure enterprise solutions.
• Experience integrating security into modern software delivery pipelines using automated testing and policy enforcement.
• Hands-on experience with application security, cloud security, vulnerability management, and developer security platforms.
• Experience implementing IAM, Zero Trust principles, logging, monitoring, and security automation.
• Experience supporting governance frameworks including ISO/IEC 27001, 27017, 27018, NIST CSF, or SOC 2.
• Strong automation and scripting skills using Python, PowerShell, Bash, or REST APIs.
• Excellent communication skills, with the ability to translate security requirements into practical engineering solutions.

Preferred Qualifications

• Experience securing AI agents, MCP integrations, RAG solutions, vector databases, or AI orchestration platforms.
• Experience implementing AI governance programs and enterprise AI security standards.
• Experience performing threat modeling, application security assessments, and architecture reviews.
• Experience supporting internal and external compliance audits.
• Professional certifications such as CISSP, CCSP, CISM, Azure Security Engineer Associate, or AWS Certified Security – Specialty.

Tools & Technologies

Experience with one or more of the following is preferred:

• Source Control & CI/CD: GitHub Enterprise, GitHub Actions, Azure DevOps, GitLab, Jenkins
• Application Security: GitHub Advanced Security, SonarQube, SonarCloud, Snyk, Checkov, DefectDojo
• Cloud Security: Wiz, Microsoft Defender for Cloud, Microsoft Defender XDR, Microsoft Sentinel, SentinelOne
• Cloud Platforms: Microsoft Azure, AWS, Google Cloud Platform (GCP)
• Identity & Access: Microsoft Entra ID
• Data Protection: Microsoft Purview, Microsoft Defender for Cloud Apps, Microsoft Intune
• AI Platforms: ChatGPT Enterprise, Microsoft Copilot, Google Gemini, Claude, Azure AI Foundry, AI agents, MCP integrations
• Automation: Python, PowerShell, Bash, REST APIs

This position description may not describe all duties, responsibilities, and skills associated with this position. It is intended to portray the major aspects of the job. Other duties or skills may be required.

What We Offer

• The opportunity to work with a purpose — simplifying global expansion across borders and cultures
• A diverse and inclusive environment
• Country-specific benefits
• Flexible PTO
• Your birthday off and a day for you to volunteer and give back to the organization of your choice
• Generous Parental Leave Program
• Growth and development opportunities with access to a top learning content provider
  
• The opportunity to challenge yourself in a high-performing organization and leave each day knowing you have made an impact.

Atlas Technology Solutions, Inc. (Atlas HXM) is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Atlas HXM is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Atlas HXM are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Atlas HXM will not tolerate discrimination or harassment based on any of these characteristics. Atlas HXM encourages applicants of all ages.

Atlas HXM will provide accommodation on request throughout the recruitment, selection and assessment process for applicants with disabilities.

Hiring decisions are based upon Atlas HXM’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, and location.

This role will be subject to a background check under local law after an employment offer has been made. Employment may be subject to results. In addition, references may be requested at the final stage of the process.

Atlas HXM will only email candidates from an “@atlashxm.com” email address. Candidates should ignore communications purporting to be from Atlas HXM that originate from any other email address. Atlas HXM will never ask candidates or employees to purchase gift cards or otherwise make payments in connection with applying for a job with Atlas HXM.