> Markdown version of [/jobs/ext/2543378-information-security-engineer-iii](https://www.wearedevelopers.com/jobs/ext/2543378-information-security-engineer-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer III - **Company:** BCforward - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $139,360.0 - **Contract:** Temporary contract - **Skills:** Agile Methodology, Amazon Web Services, Cyber Security, Linux, Github, Identity and Access Management, Software Engineering, Test Execution Engine, Software Organization, Data Ingestion, Large Language Models, Software Security, Event Driven Architecture, Containerization, Restful APIs, Terraform, Splunk, Jenkins, Static Application Security Testing, Vulnerability Analysis - **Published:** August 28, 2026 - **Apply:** https://www.dice.com/job-detail/7f1f00c3-6786-4583-a0e4-85b5ed3fab00 ## About the Role * 2+ years of related engineering experience in information security or software development. * Exposure to AWS Bedrock or similar hosted LLM platforms, including model invocation and guardrail configuration. * Working knowledge of Infrastructure as Code and ability to build and modify Terraform modules. * Experience with CI/CD pipelines, preferably Jenkins, integrated with GitHub. * Familiarity with application security concepts, common vulnerability classes, and SAST/SCA tooling behavior. * Clear written and verbal communication of technical status, risks, and blockers to peers and leadership. * Willingness and availability to work a rotating 24/7 schedule, including nights, weekends, and holidays. * Ability to work independently during off-hours with limited supervision. * Eligibility to work in the United States without current or future sponsorship. Preferred Skills: * Hands-on AWS experience, including IAM, ECS, and service-to-service authentication patterns. * Hands-on AWS Bedrock experience, including model selection and inference optimization. * Experience with agentic or multi-step LLM workflows and context management across large repositories. * Experience with RESTful APIs and event-driven architectures. * Splunk development, including data onboarding, search, and dashboarding. * Experience with containerized workloads and Linux systems. * Prior support of a 24/7 operational environment, including shift handoff and runbook execution. * Experience working within Agile methodologies and development practices. * Experience in a regulated financial services environment. * Industry certifications such as AWS Solutions Architect Associate, AWS Security Specialty, or CompTIA Security+. ## Description We are seeking an Information Security Engineer III to deliver and support enterprise security tooling with a focus on an LLM-based code vulnerability detection and reporting capability. The role will build the scanner, evaluation harness, and CI/CD pipelines in partnership with Principal Engineering, then operate and enhance the solution through patching, tuning, feature development, and sustained support. This position participates in a four-person rotation to provide 24/7 operational coverage, with average scheduled hours of 40 per week and primary focus on engineering work rather than active incident response. Triage and remediation ownership are out of scope for this role., * Implement and operate an LLM-based code vulnerability detection capability on AWS Bedrock, including prompt and agent design, model invocation patterns, cost and token controls, and results normalization. * Build and maintain an evaluation harness with regression corpora, repeatable test execution, and reporting on detection performance over time. * Develop and maintain scanning pipelines integrated with GitHub and Jenkins, deployed to ECS and provisioned via Terraform. * Ingest findings and telemetry into Splunk and build dashboards and alerting for scanner health, coverage, and throughput. * Engineer well-architected solutions following software development best practices and established architecture. * Design, test, and implement Story- and Feature-level solutions within defined standards. * Contribute to standards, procedures, runbooks, and guidelines for Information Security operations. * Provide ongoing operational support, patching, and defect resolution after go-live. * Participate in a rotating 24/7 shift schedule, including nights, weekends, and holidays, averaging 40 hours per week. * Monitor scanner health, pipeline execution, and alert queues during assigned shifts and execute runbooks with proper escalation. * Perform structured shift handoffs documenting open issues, in-flight changes, and outstanding escalations. * Maintain controls and documentation to meet company and regulatory requirements. * Apply knowledge of virtualization and containerization technologies. * Perform other duties as assigned. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)