PhysicsX
Security Engineer – DevSecOps and Security Architect
$200K–$300K
New York, New York +2 · Full-time · Posted Feb 5, 2026
- Location
- New York, New York
London, England, United Kingdom
New York, New York, United States - Experience
- 10+ years in security, with a focus on DevSecOps and security design reviews.
About the job
Leads security engineering by embedding security into development workflows, reviewing designs, and managing product vulnerabilities.
What you'll do
- Integrate security tooling into CI/CD pipelines and scale secure development practices with engineering teams.
- Lead threat modeling and secure design reviews for web applications, APIs, and cloud services; oversee vulnerability triage and remediation support.
- Develop secure coding standards and playbooks, train and mentor teams, and engage with customers during security reviews.
What they ask for
- 10+ years in security, focused on DevSecOps and security design reviews.
- Hands-on experience with secure coding, OWASP Top 10, threat modeling, and SDLC integration.
- Experience with GitHub/GitLab, CI/CD, IaC, containerized environments, and SAST tooling.
- Experience developing in Python and Go; strong communication skills.
Nice to have
- Understanding of AI security fundamentals and its intersection with application security.
- Experience securing cloud infrastructure; bug bounty or security disclosure experience; familiarity with BSIMM.
Pay
$200,000 to $300,000 USD base salary
Tools
GitHub/GitLab, CI/CD, IaC, SAST, Semgrep, Snyk, Python, Go
AI focus
Nice-to-have understanding of AI security fundamentals and how application security and AI security intersect.
Model-written summary · the original posting is authoritative