DevSecOps Engineer (TypeScript & Agentic AI)

About this role

Arize AI, a Series C AI observability platform, is seeking a DevSecOps Engineer to embed security throughout their TypeScript-based infrastructure and agentic AI systems. You'll design guardrails for AI agents, build internal security tooling, and partner cross-functionally to ensure safe deployment of autonomous systems in a collaborative, enablement-focused environment.

What you'll do

• Design and implement security guardrails for agentic AI workflows including sandboxing, prompt-injection defenses, and runtime policy enforcement
• Build internal TypeScript tooling such as SDKs, CLI utilities, GitHub Actions, and developer dashboards to make secure practices frictionless
• Threat-model new features with product teams, particularly those involving LLM integrations and autonomous agents
• Integrate and tune SAST, DAST, SCA, and secret scanning into pull-request workflows with low-friction feedback
• Lead security incident response and produce blameless postmortems that improve systems
• Mentor engineers across the organization on secure coding patterns and LLM/agent-specific security risks

What they're looking for

• DevSecOps / Application Security (4+ years)
• TypeScript and Node.js ecosystem
• Cloud infrastructure security (AWS, GCP, or Azure)
• Kubernetes and container security
• CI/CD tooling (GitHub Actions) and Infrastructure as Code (Terraform, Pulumi)
• Agentic AI systems and LLM frameworks (LangGraph, OpenAI, Anthropic SDKs)
• SAST/DAST/SCA tooling and secret scanning
• Threat modeling and incident response

Benefits

• Remote/Hybrid work in Southern California
• Collaboration-first, enablement-over-enforcement culture
• Work on cutting-edge agentic AI security challenges
• Senior team with strong focus on developer experience
• Opportunity to shape emerging security patterns for AI systems