AI AppSecOps Engineer - Remote - CTH

Job title: AI AppSecOps Engineer

Position Type: Contract to hire (3-6 months prior to full-time conversion)

Work Location: 100% Remote - EST Hours

ABOUT OUR CLIENT / ABOUT THIS ROLE

Medix is currently seeking an AI AppSecOps Engineer for a contract to hire role with one of our national healthcare technology clients

Our client owns and manages a cloud-native technology product: single source of truth for healthcare provider and member data. The organization is actively integrating generative AI - including Claude, agentic systems, and custom LLMs - across its development lifecycle and Azure infrastructure, requiring strict safeguards for sensitive PHI/PII.

This AI AppSecOps Engineer is a hands-on engineering role to design, build, and enforce threat models, security gates, and policy-as-code controls across CI/CD pipelines, agentic workflows, and user-facing AI features. This is a technical execution role requiring hands-on experience in integrating AI across DevOps and Security workstreams

RESPONSIBILITIES

• Owning the AI security reference architecture across model hosting, orchestration, MCP servers, and observability before features hit production.
• Implementing and maintaining threat models for AI and agentic systems using OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF to drive prioritized controls.
• Hardening CI/CD pipelines against injection, jailbreaking, and poisoning
• Establishing trust boundaries for Agentic AI, least-privilege scoping, short-lived credentials, and human-in-the-loop policies for multi-agent systems.
• Implementing AI Code and Build Integrity through gating, SCA/SBOM, and secrets management for AI-generated code, while also embedding security checks into developer system prompts.
• Applying zero-trust principles and OAuth/OIDC delegation to human and agent identities, ensuring all model calls, tool uses, and vector queries are authenticated and logged.
• Implementing Data Protection & DLP - preventing data poisoning and enforcing tokenization, masking, and DLP across context windows, ETL pipelines, and logs to protect PII, PHI, and PCI.
• Deploying behavioral telemetry to detect injection attempts, data exfiltration, and runaway agents, serving as SME for AI security incidents.
• Mapping AI systems to SOC 2, HIPAA, ISO 27001, and NIST RMF frameworks
• Integrating AI firewalls and guardrails into SIEM/SOAR.

REQUIRED SKILLS & QUALIFICATIONS

• Experience: 8-10+ years of professional experience, with a College Degree
• AI AppSecOps - Must have a subject matter expertise in cloud-native and AI-based AppSecOps
• IaC Security - Secure coding expertise in Python and Terraform
• IAM - Deep experience in OAuth 2.0, OIDC, SAML, and SCIM applied to agentic and non-human identities.
• CI/CD Security Gating -Ability to build custom policy checks from scratch for automated delivery pipelines.
• Data Security & Secrets - Practical application of DLP, encryption, tokenization, and secrets managers (Vault, AWS, Azure).
• Agentic Frameworks & Guardrails - Deep security knowledge of orchestration frameworks (LangChain, LangGraph, AutoGen) with the ability to engineer automated agent kill-switches and rollback controls.

*We will consider for employment all qualified Applicants, including those with criminal histories, in a manner consistent with the requirements of applicable federal, state, and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance (FCIHO), Los Angeles Fair Chance Ordinance for Employers (ULAC), The San Francisco Fair Chance Ordinance (FCO), and the California Fair Chance Act (CFCA).

*This position is subject to a background check based on its job duties, which may include patient care, working with vulnerable populations, access to financial and confidential information, driving, working with heavy machinery, or working in a warehouse or laboratory environment. Due to these job duties, this position has a significant impact on the business operations and reputation, as well as the safety and well-being of individuals who may be cared for as part of the job position or who may interact with staff or clients.