AI Security Automation / DevSecOps Engineer
Lenovo - Morrisville, NC
posted 3 months ago
About the position
This position is for an AI Security Automation / DevSecOps Engineer in the Security Center of Excellence for the Global PC and Smart Devices Business (PCSD) at Lenovo. In this exciting role, you will collaborate with a global team of development engineers and security professionals, working across multiple business units and DevOps teams to implement, configure, and administer AI and DevSecOps tools within CI/CD pipelines and other aspects of the product security review process. You will be part of a leading security team in the industry, keeping abreast of the latest DevSecOps technologies and trends, and you will have the opportunity to significantly impact the largest PC company in the world. Your responsibilities will include researching how AI can integrate with current processes and tools, as well as identifying and recommending tools that can enhance product security through AI. You will work closely with other business unit teams to assist in the implementation and maintenance of security tools and processes, ensuring that proper metrics are established to demonstrate improvements and identify gaps in our processes. This role requires a proactive approach, excellent organizational skills, and the ability to thrive in a fast-paced environment with multiple partners and projects. In summary, you will research AI tools and develop integration solutions to enhance product security reviews, identify new tools and developments that assist teams in reviewing AI products, implement and maintain tools in collaboration with your team and other business units, and ensure Lenovo remains a leader in AI tools and techniques. You will also be responsible for collecting and reporting on KPIs and other metrics to reflect progress and improvements in security processes.
Responsibilities
- Research AI tools and develop integration solutions and efficiencies with existing tools and processes to assist with product security reviews.
- Identify tools and new developments that assist teams with reviews of products that use AI, e.g. Guardrails, etc.
- Implement, integrate, and maintain tools with your team and other business units.
- Identify areas of improvement to our CI/CD pipelines.
- Research and recommend new AI tools, processes, and techniques.
- Collect and report on KPIs and other metrics.
- Ensure Lenovo stays a leader in AI tools, techniques, and processes.
Requirements
- Bachelor's degree in a relevant field or equivalent relevant experience
- 3+ years of cybersecurity experience
- 1+ years of DevSecOps experience
- Knowledge of Artificial Intelligence
- Knowledge of public cloud providers
- Experience with implementing and maintaining DevSecOps tools.
Nice-to-haves
- Strong written and verbal communications and interpersonal skills
- Ability to work independently as well as function as an integral part of a team, take initiative and ownership in a fast-paced environment
- Ability to successfully work across regions and functions to solve problems and get things done
- Experience leveraging AI in security review processes
- Experience with Contrast, Anchore, WiZ, Coverity, Checkmarx, Defensics, Synk, Fossa, jFrog, Jenkins, Jira, Confluence, and Bitbucket
- Experience with SAST, DAST, IAST and RASP tools and implementing them in a CI/CD pipeline
- Experience working with developers and as a developer
- Knowledge of Agile processes
- Experience implementing new solutions and tools
- Experience implementing and recording appropriate metrics to reflect an accurate picture of progress to management
- ISC2 Certifications such as Certificated Information System Security Professional (CISSP), and Certified Cloud Security Professional (CCSP)
- SANS Certifications such as GIAC Cloud Security and DevSecOps Automation (GCSA), and GIAC Cloud Penetration Tester (GCPN)
- Public Cloud Provider certifications such as AWS Solutions Architect, AWS Certified Security Specialty, Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Azure Security Engineer Associate, and GCP: Professional Cloud Architect.
Benefits
- Competitive salary range of $150,000 - $195,000
- Bonus and/or commission opportunities
- Comprehensive benefits package available at www.lenovobenefits.com
