[Hiring] AI AppSecOps Engineer @Medix

Role Description

Medix is currently seeking an AI AppSecOps Engineer for a contract to hire role with one of our national healthcare technology clients. This AI AppSecOps Engineer is a hands-on engineering role to design, build, and enforce threat models, security gates, and policy-as-code controls across CI/CD pipelines, agentic workflows, and user-facing AI features. This is a technical execution role requiring hands-on experience in integrating AI across DevOps and Security workstreams.

• Owning the AI security reference architecture across model hosting, orchestration, MCP servers, and observability before features hit production.
• Implementing and maintaining threat models for AI and agentic systems using OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF to drive prioritized controls.
• Hardening CI/CD pipelines against injection, jailbreaking, and poisoning.
• Establishing trust boundaries for Agentic AI, least-privilege scoping, short-lived credentials, and human-in-the-loop policies for multi-agent systems.
• Implementing AI Code and Build Integrity through gating, SCA/SBOM, and secrets management for AI-generated code, while also embedding security checks into developer system prompts.
• Applying zero-trust principles and OAuth/OIDC delegation to human and agent identities, ensuring all model calls, tool uses, and vector queries are authenticated and logged.
• Implementing Data Protection & DLP - preventing data poisoning and enforcing tokenization, masking, and DLP across context windows, ETL pipelines, and logs to protect PII, PHI, and PCI.
• Deploying behavioral telemetry to detect injection attempts, data exfiltration, and runaway agents, serving as SME for AI security incidents.
• Mapping AI systems to SOC 2, HIPAA, ISO 27001, and NIST RMF frameworks.
• Integrating AI firewalls and guardrails into SIEM/SOAR.

Qualifications

• 8-10+ years of professional experience, with a College Degree.
• Must have a subject matter expertise in cloud-native and AI-based AppSecOps.
• Secure coding expertise in Python and Terraform.
• Deep experience in OAuth 2.0, OIDC, SAML, and SCIM applied to agentic and non-human identities.
• Ability to build custom policy checks from scratch for automated delivery pipelines.
• Practical application of DLP, encryption, tokenization, and secrets managers (Vault, AWS, Azure).
• Deep security knowledge of orchestration frameworks (LangChain, LangGraph, AutoGen) with the ability to engineer automated agent kill-switches and rollback controls.

Requirements

• This position is subject to a background check based on its job duties, which may include patient care, working with vulnerable populations, access to financial and confidential information, driving, working with heavy machinery, or working in a warehouse or laboratory environment.
• Due to these job duties, this position has a significant impact on the business operations and reputation, as well as the safety and well-being of individuals who may be cared for as part of the job position or who may interact with staff or clients.