Sr. DevSecOps Application Security Engineer

<div class="content-intro"><p><strong>Life at Plume</strong></p> <p><span style="font-weight: 400;">At Plume, we believe that technology isn't about moving faster, it's about making life’s moments better. Which is why we’ve built the world's first, and only, open and hardware-independent service delivery platform for smart homes, small businesses, enterprises, and beyond. Our SaaS platform uses WiFi, advanced AI, and machine learning to create the future of connected spaces—and human experiences—at massive scale.</span></p> <p><span style="font-weight: 400;">We now deliver services to over 60 million locations globally and have managed over 3 billion devices on our platform. We’re expanding rapidly, pioneering a new category, and we achieved our Series F funding in just four years. Our customers include many of the world's largest Internet Service Providers (ISPs) who look to Plume to help them evolve their smart home offerings while gleaning insights from their own data. </span></p> <p><span style="font-weight: 400;">With a bias for action and a love for being trailblazers, the team at Plume embodies a combination of relentless curiosity and imaginative innovation. We challenge ourselves to think in ways that other companies don't, work to do what should be done (rather than what can), and if we can’t do it exceptionally well, we don’t do it. It’s how we've assembled a team of world-class builders, thinkers, and doers. And it’s how we’re reinventing what’s possible every day.</span></p></div><h4 data-start="51" data-end="132">This is a work-from-office / In-Office role based in our Hyderabad, India location.</h4> <p><strong>The Opportunity:</strong></p> <p><strong>Overview:</strong> Plume is seeking a dynamic Senior DevSecOps Application Security Engineer to champion and drive their DevSecOps and Application Security initiatives—shaping secure software delivery across a fast-moving, cloud-native environment. In this role, you will own and lead development of processes, policies, automation and security tooling to streamline security in SDLC and CI/CD pipelines, working closely with software engineers, product leads, DevOps and data engineers. You will help with security by design and privacy by design reviews, with a goal of being an expert in product security disciplines but also move beyond traditional scanning to a model of autonomous remediation using AI, so that internal AI-assisted development produces code that is secure by default. </p> <p>Join Plume’s security engineering team and contribute to protecting our mission, ensuring the integrity of our systems, and maintaining the highest standards of information security and privacy.</p> <p><strong>Key Responsibilities:</strong></p> <ul> <li>Lead the Application Security, AI Coding Security and DevSecOps domain, focusing on reducing software security risks.</li> <li>Manage Application security tools in SAST, DAST, IaC, SCA, Secrets, Leaks using your understanding of secure coding principles to guide policies.</li> <li>Design and deploy best practices for AI-assisted coding to develop security roles (skills) that prevent AI from introducing security defects.</li> <li>Run the Security Champions program using metrics to show risk and improvements</li> <li>Improve the DevOps pipeline to protect cloud applications, resources and APIs. </li> <li>Implement and maintain controls within the Continuous Integration/Continuous Deployment (CI/CD) pipeline to meet necessary security standards</li> <li>Develop and maintain security policies, procedures, and guidelines, recommending necessary changes to ensure full compliance with applicable requirements.</li> <li>Advise engineering and development teams on security best practices and design principles by using your knowledge of SaaS and IoT architecture approaches</li> <li>Enforce security policies for cloud deployments, manage centralized configurations, and monitor systems for security compliance.</li> <li>Serve as the subject matter ... (truncated, view full listing at source)