Lead Information Secuirty Engineer

Agility Partners is seeking a qualified Lead Information Security Engineer to fill an open position with one of our clients in the financial services industry. This role offers the opportunity to build and support an innovative, LLM-based security scanning capability designed to identify code vulnerabilities and improve application security. You’ll work across AWS, AI/LLM technologies, CI/CD, infrastructure automation, and security engineering while contributing to a highly visible enterprise security initiative. The role also provides the chance to work within a collaborative engineering environment where your contributions directly support the reliability and evolution of critical security tooling.

What You'll Be Responsible For

Implement and continuously improve an LLM-based code vulnerability detection platform using AWS Bedrock, including model invocation, prompt/agent implementation, guardrails, and result processing.

Build and maintain evaluation frameworks, CI/CD pipelines, and supporting infrastructure using technologies such as GitHub, Jenkins, ECS, Terraform, and Splunk.

Develop, test, and deploy engineering solutions within an established architecture while supporting ongoing patching, tuning, defect resolution, and feature development.

Provide operational support within a rotating 24/7 schedule, monitoring platform health, executing runbooks, documenting issues, and collaborating with engineering teams to resolve technical challenges.

The Ideal Candidate

2+ years of experience in information security engineering, software development, or a related technical engineering role.

Experience with AWS Bedrock or similar hosted LLM platforms, including model invocation, guardrails, or AI-driven application development.

Working knowledge of Terraform and Infrastructure as Code, with the ability to build or modify Terraform modules.

Experience working with CI/CD pipelines, preferably Jenkins and GitHub, and familiarity with containerized environments such as ECS.

Understanding of application security concepts, common vulnerability classes, and SAST/SCA tooling.

Strong communication skills with the ability to clearly communicate technical status, risks, blockers, and operational issues to both technical and leadership audiences.

Ability to work independently within a rotating 24/7 operational schedule, including nights, weekends, and holidays.

Reasons to Love It

Work at the intersection of AI & cybersecurity: Help build an innovative LLM-powered solution focused on detecting software vulnerabilities.

Broad technical exposure: Gain hands-on experience across AWS Bedrock, Terraform, ECS, Jenkins, GitHub, Splunk, and modern security engineering.

Build and improve—not just maintain: Contribute to new features, evaluation capabilities, automation, and platform improvements within an established architecture.

High-impact security work: Help strengthen enterprise application security and support a critical capability within a regulated financial services environment.