Associate Director - Application Security/DevSecOps - Life Sciences

Job description

**Role & responsibilities** What the role covers: - Security scanning and hardening of CI/CD pipelines for agent and platform releases including Jenkins. - LLM-specific security testing prompt injection scanning (Promptfoo, Garak, DeepTeam), adversarial testing, output validations - Infrastructure security across EKS, Snowflake, Salesforce, and the hybrid execution environment - TPA compliance scanning and remediation governance - Agent configuration security — CLAUDE.md audits, MCP server vetting, Developer environment hardening - Vulnerability management, dependency scanning, and secrets management Profile we're looking for: - 10–12+ years’ experience in DevSecOps and Application Security - Strong in CI/CD security (GitHub Actions, container security, Kubernetes/EKS hardening) - Familiarity with LLM/AI security tooling — this is important given OWASP LLM Top 10 is now the standard framework. - Python proficiency (our agent stack is Python-native — FastAPI, LangGraph, LangChain) - Experience with compliance frameworks relevant to pharma (HIPAA, SOX, FDA) - Experience with Snowflake security, Salesforce Shield and HashiCorp Vault