Information Security Engineer IV

• Serve as a security engineer and consultant on cloud projects.
• Build and operate an LLM-based code vulnerability detection capability on AWS Bedrock, including prompt and agent design, model invocation patterns, cost and token controls, and result normalization.
• Develop and maintain an evaluation harness with regression corpora, repeatable test execution, and performance reporting over time.
• Build and maintain scanning pipelines integrated with GitHub and Jenkins, deployed to ECS and provisioned through Terraform.
• Deliver findings and operational telemetry into Splunk and develop dashboards and alerting for scanner health, coverage, and throughput.
• Engineer and implement well-architected solutions that follow software development best practices.
• Advise Principal Engineers and Product Owners on operations and product evolution.
• Design, test, and implement solutions at the feature level.
• Support operational information security responsibilities, including development and maintenance of standards, procedures, and guidelines.
• Provide ongoing operational support, patching, and defect resolution for the deployed scanner after go-live.
• Participate in a four-person rotating shift schedule providing 24/7 coverage, including nights, weekends, and holidays, averaging 40 hours per week.
• Maintain appropriate controls and documentation to ensure compliance with company and regulatory requirements.
• Understand virtualization and containerization technologies.
• Participate in operational on-call rotation within normal working hours.
• Perform other duties as assigned.

• 4+ years of related engineering experience in information security or software development.
• Hands-on experience with AWS Bedrock or similar hosted LLM platforms, including model selection, inference optimization, and guardrail configuration.
• Strong Infrastructure as Code skills and experience building reusable Terraform modules.
• Experience building and maintaining CI/CD pipelines, preferably Jenkins, integrated with GitHub.
• Working knowledge of application security concepts, common vulnerability classes, and SAST/SCA tooling behavior.
• Clear verbal and written communication skills for management, business sponsors, and technical audiences.
• Eligibility to work in the United States without current or future sponsorship.

Preferred Skills:

• Experience building on AWS, including IAM, ECS, and service-to-service authentication patterns.
• Experience with agentic or multi-step LLM workflows and context management across large repositories.
• Experience with RESTful APIs and event-driven architectures.
• Splunk development experience, including data onboarding, search, and dashboarding.
• Experience with containerized workloads and Linux systems.
• Experience working in Agile methodologies and development.
• Prior experience in a regulated financial services environment.
• Industry certifications such as AWS Security Specialty, AWS Solutions Architect Associate, CompTIA Security+, ISC2 CISSP, or SANS.

• Competitive compensation and benefits.
• Opportunities for growth with global clients.
• A supportive, inclusive culture that values innovation and people.
• Exposure to cutting-edge technologies and projects.

BCforward is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, BCforward has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.