DevOp/SRE Engineer

Eliassen Group is seeking a DevOps/SRE Engineer to support an Information Security team. The role will build, operate, and improve an LLM-based code vulnerability detection and reporting capability, including its scanner, evaluation harness, CI/CD pipelines, monitoring, and ongoing operational support.

Responsibilities

Serve as a security engineer and consultant on cloud projects

Build and operate an LLM-based code vulnerability detection capability on AWS Bedrock, including prompt and agent design, model invocation patterns, cost and token controls, and result normalization

Develop and maintain the evaluation harness to measure scanner quality, including regression corpora, repeatable test execution, and reporting on detection performance over time

Build and maintain scanning pipelines integrated with GitHub and Jenkins, deployed to ECS and provisioned through Terraform

Deliver findings and operational telemetry into Splunk, and build dashboards and alerting for scanner health, coverage, and throughput

Engineer and implement well-architected solutions while adhering to software development best practices

Advise Principal Engineers and Product Owners on operations and evolution of their product

Design, test, and implement solutions at the Feature level

Support operational information security responsibilities, including development and maintenance of standards, procedures, and guidelines

Provide ongoing operational support, patching, and defect resolution for the deployed scanner after go-live

Participate in a four-person rotating shift schedule providing 24/7 coverage, including nights, weekends, and holidays, averaging 40 hours per week

Maintain appropriate controls and documentation to ensure compliance with company and regulatory requirements

Understand virtualization and containerization technologies

Participate in operational on-call rotation within normal working hours

Perform other duties as assigned

Preferred

experience with AWS IAM, ECS, and service-to-service authentication patterns

experience with agentic or multi-step LLM workflows, including context management across large repositories

experience with RESTful APIs and event-driven architectures

Splunk development experience, including data onboarding, search, and dashboarding

experience with containerized workloads and Linux systems

experience working in Agile methodologies and development

prior experience in a regulated financial services environment

industry certifications such as AWS Security Specialty, AWS Solutions Architect Associate, CompTIA Security+, ISC2 CISSP, or SANS

AWS IAM

Amazon ECS

Service-to-service authentication

Agentic LLM workflows

Multi-step LLM workflows

LLM context management

RESTful APIs

Event-driven architectures

Splunk development

Splunk data onboarding

Splunk search

Splunk dashboards

Containerized workloads

Linux systems

Agile methodologies

Agile development

Regulated financial services

AWS Security Specialty

AWS Solutions Architect Associate

CompTIA Security+

ISC2 CISSP

SANS certifications

Benefits

For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Company

Strategic consulting in technology, business advisory, and life sciences.

North Reading, Massachusetts, USA

http://www.eliassen.com/

Founded in 1989

1001-5000 employees

Qualifications

4+ years of related engineering experience, including hands-on information security or software development work

Hands-on experience with AWS Bedrock or equivalent hosted LLM platforms, including model selection, inference optimization, and guardrail configuration

Understanding of Infrastructure as Code best practices and strong experience building Terraform modules

Experience building and maintaining CI/CD pipelines, preferably Jenkins, integrated with GitHub

Working knowledge of application security concepts, common vulnerability classes, and SAST/SCA tooling behavior

Clear verbal and written communication skills for management, business sponsors, and technical stakeholders

Eligible to work in the US without the need for sponsorship now or in the future

Experience with AWS IAM, ECS, and service-to-service authentication patterns

Experience with agentic or multi-step LLM workflows, including context management across large repositories

Experience with RESTful APIs and event-driven architectures

Splunk development experience, including data onboarding, search, and dashboarding

Experience with containerized workloads and Linux systems

Experience working in Agile methodologies and development

Prior experience in a regulated financial services environment

Industry certifications such as AWS Security Specialty, AWS Solutions Architect Associate, CompTIA Security+, ISC2 CISSP, or SANS

4+ years of related engineering experience, including hands-on information security or software development work.

Required skills

AWS Bedrock, Terraform, Jenkins, GitHub, Application Security, Static Application Security Testing (SAST), Software Composition Analysis (SCA), AWS IAM, Amazon ECS, Agentic LLM Workflows, RESTful APIs, Splunk, Linux

Preferred skills

experience with RESTful APIs and event-driven architectures, experience with containerized workloads and Linux systems, experience working in Agile methodologies and development

Experience

4+ years