Security Engineer – AI, DevSecOps & Embedded Systems

About the role

Nanoprecise Sci Corp is building the security spine of a next‑generation IoT + AI platform for industrial and enterprise environments. We are seeking a seasoned Security Engineer who can design, automate, and scale security programs across AI models, cloud pipelines, firmware, and wireless infrastructure.

Key responsibilities

• Design and enforce security controls for AI/LLM deployments, including threat modeling with MITRE ATLAS and STRIDE.
• Lead red‑team exercises against AI models and Retrieval‑Augmented Generation (RAG) systems.
• Own end‑to‑end security of CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins) and integrate SAST, DAST, SCA, and secrets‑scanning tools.
• Implement policy‑as‑code with OPA/Gatekeeper for Kubernetes and IaC, and establish container security standards (Cosign, Notary, Falco).
• Conduct firmware security assessments using Ghidra, IDA Pro, Binwalk, and Radare2; define secure OTA, boot, and encrypted communication processes.
• Perform Wi‑Fi and wireless protocol penetration testing (WPA2/WPA3, BLE, Zigbee, LoRa, Z‑Wave) and deploy Wireless Intrusion Detection Systems.
• Design Zero‑Trust network architecture, manage SIEM integrations (Splunk, Elastic, Sentinel), and lead incident response across all layers.

Required profile

• 3+ years of security engineering experience with proven expertise in at least three of AI security, DevSecOps, firmware reverse engineering, or wireless/network security.
• Strong analytical mindset, ability to mentor junior engineers, and experience driving security‑by‑design practices.

Required skills

• AI security frameworks: MITRE ATLAS, STRIDE, prompt‑injection defenses.
• SAST/DAST/SCA tools: Semgrep, CodeQL, OWASP ZAP, Burp Suite, Snyk, Dependabot.
• Secrets scanning: TruffleHog, Gitleaks.
• Policy‑as‑code: OPA, Gatekeeper.
• Kubernetes, IaC, container security: Cosign, Notary, Falco.
• CI/CD platforms: GitHub Actions, GitLab CI, Jenkins.
• Firmware analysis tools: Ghidra, IDA Pro, Binwalk, Radare2.
• Embedded debugging: UART, JTAG, SPI extraction.
• Wireless testing: Wi‑Fi (WPA2/WPA3), BLE, Zigbee, LoRa, Z‑Wave.
• SIEM platforms: Splunk, Elastic, Microsoft Sentinel.
• Incident response and threat intelligence operationalization.