Associate Director - Application Security/DevSecOps - Life Sciences

Job description

Role & responsibilities What the role covers: • Security scanning and hardening of CI/CD pipelines for agent and platform releases including Jenkins. • LLM-specific security testing prompt injection scanning (Promptfoo, Garak, DeepTeam), adversarial testing, output validations • Infrastructure security across EKS, Snowflake, Salesforce, and the hybrid execution environment • TPA compliance scanning and remediation governance • Agent configuration security — CLAUDE.md audits, MCP server vetting, Developer environment hardening • Vulnerability management, dependency scanning, and secrets management Profile we're looking for: • 10–12+ years’ experience in DevSecOps and Application Security • Strong in CI/CD security (GitHub Actions, container security, Kubernetes/EKS hardening) • Familiarity with LLM/AI security tooling — this is important given OWASP LLM Top 10 is now the standard framework. • Python proficiency (our agent stack is Python-native — FastAPI, LangGraph, LangChain) • Experience with compliance frameworks relevant to pharma (HIPAA, SOX, FDA) • Experience with Snowflake security, Salesforce Shield and HashiCorp Vault