DevSecOps Engineer
Pathos · New York, NY ·
- Work mode
- Hybrid
- Category
- Security
- Experience
- 6+ years
Pathos · New York, NY ·
We handle some of the most sensitive data around: patient outcomes, clinical trial records, and the multimodal datasets behind our foundation model, all inside a company that runs on agents with broad, standing access to internal systems. That combination raises the stakes on security in a way most companies never have to think about.
The threat landscape is moving fast too. Capable AI models have lowered the skill floor for finding and exploiting vulnerabilities, so the volume and sophistication of attacks aimed at companies like ours keeps climbing. We need someone who takes that seriously, builds for it before it's a problem, and doesn't treat security as something you check off at the end of a project.
We're hiring a DevSecOps engineer to own security architecture and practice across our AI and data infrastructure: the pipelines, agent tooling, and internal systems that power our BD, clinical development, computational biology, and lab teams. This isn't a compliance-only role. You'll design the guardrails, then get in the code and build them yourself.
What You'll Build
Who You Are
You've owned security for a production system end to end, from architecture through detection and response, somewhere a breach would be a real problem, not a hypothetical one. You think like an attacker and build like an engineer: you don't just write policy, you ship the code and tooling that make the secure path the easy path. You've kept up with how much easier AI has made attacks to pull off, and you turn that into concrete engineering decisions instead of vague concern. You move quickly, take initiative, and want to be judged on systems that hold up under real pressure, not paperwork that satisfies an audit.
Must-haves
Bonus
Location
This is a hybrid role, requiring 4 days per week onsite, in our NYC Headquarters.