Skip to content
All roles
Security & DevSecOps

Lead Security Engineer / DevSecOps

Stafffull-timeRemote (Global)$210k–$300k + equity
As the Lead Security Engineer / DevSecOps at Overnox, you own how we make clients' cloud, Kubernetes, and AI systems secure by design — not as an afterthought bolted on before an audit, but as the default path baked into every platform we build. You are the most senior security IC in the practice: the person who designs secure baselines, hardens CI/CD supply chains, builds detection and response capabilities, and gets called in when an enterprise client needs someone who can go deep on cloud attack surfaces, IAM, Zero Trust, and the emerging class of AI-specific threats. You'll define Overnox's DevSecOps reference architecture — shift-left scanning (SAST/DAST/SCA), IaC and container security, secrets management, policy-as-code, and runtime protection — and embed it into the platforms our infrastructure and AI teams deliver. You'll also lead our AI security work: LLM security reviews, prompt-injection and jailbreak defense, and AI red-teaming, an area where enterprise demand is exploding and deep expertise is scarce. This role matters because security is central to Overnox's positioning — clients hire us precisely because we build AI and infrastructure that stands up to scrutiny. You are the engineer most responsible for ensuring that when a CISO or auditor looks under the hood, what they find earns their trust.

What you'll do

  • Define and implement secure-by-default baselines for cloud (AWS/GCP/Azure) and Kubernetes infrastructure, and embed them into Overnox's platform reference architectures
  • Own the DevSecOps pipeline: shift-left SAST/DAST/SCA, IaC scanning, container/image supply-chain security (SBOM, signing), and secrets management
  • Drive vulnerability management and remediation — prioritization, tracking, and closing the loop — across client environments
  • Design and extend detection and response: SIEM pipelines, cloud threat detection, alerting, and incident response playbooks and runbooks
  • Lead AI/LLM security engagements: prompt-injection and jailbreak defenses, LLM security reviews, output/guardrail validation, and AI red-teaming
  • Architect IAM and Zero Trust designs — least privilege, identity federation, network segmentation — for client platforms
  • Automate security tooling and controls with code (Python, Go, Rego, HCL) so guardrails scale without slowing delivery
  • Serve as the senior security voice with client CISOs and engineering leaders, run threat models, and mentor security and platform engineers

What we're looking for

  • 8+ years in security engineering, cloud security, or DevSecOps, with a track record of securing production systems at scale
  • Deep, hands-on cloud security expertise in at least one major provider (AWS, GCP, or Azure) and strong Kubernetes security experience
  • Proven DevSecOps skills: integrating SAST/DAST/SCA and IaC/container scanning into CI/CD, plus secrets management and policy-as-code (OPA/Rego)
  • Strong grasp of IAM, Zero Trust, network security, and secure architecture design
  • Hands-on detection & response experience: SIEM, threat detection, and leading incident response
  • Automation-first mindset with real coding ability in Python, Go, or similar (plus HCL/Rego)
  • Experience with threat modeling and translating technical risk into clear business terms
  • Demonstrated technical leadership and mentorship in a security context

Nice to have

  • Hands-on AI/LLM security: prompt-injection research, jailbreak defense, AI red-teaming, or LLM security reviews
  • Familiarity with SOC 2, ISO 27001, HIPAA, or PCI DSS control implementation
  • Offensive security background (pentesting, red team) or relevant certs (OSCP, GIAC, CKS)
  • Experience building or operating security operations for multiple clients
  • Contributions to open-source security tooling or published research

About Overnox

Overnox is an AI engineering and infrastructure consultancy. We help startups and enterprises securely adopt AI, automate operations, and scale cloud infrastructure with enterprise-grade engineering — building, securing, and operating production AI systems as one accountable senior team. Security-first, product-minded, no outsourcing.

What we offer

  • Fully remote — work from anywhere, with a few hours of overlap for collaboration
  • Competitive base plus meaningful equity in the company you're helping build
  • Senior-only team — real peers, no juniors to babysit, no offshore handoffs
  • Top-tier hardware and a generous learning, certification, and conference budget
  • Direct ownership of outcomes and a genuine say in how we build and operate
  • Region-appropriate health, time-off, and wellbeing support

Compensation

The listed range ($210k–$300k + equity) is a good-faith estimate. Final compensation is based on your experience, level, and location, and includes meaningful equity. We benchmark pay against the market and review it regularly.

Equal opportunity & accommodations

Overnox is an equal opportunity employer. We celebrate diversity and are committed to an inclusive environment for everyone. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by applicable law.

If you need a reasonable accommodation at any point in the application or interview process, email hello@overnox.com and we'll work with you.

Apply for this role

Attach your resume and tell us why you're a fit.