Lead Agentic Security Engineer
About the role
The Lead Agentic Security Engineer at IFS is a technical leadership role responsible for setting the technical direction and owning critical security capabilities across the organization. The position involves defining and driving security engineering strategy, leading cross-team security initiatives, and mentoring engineers at all levels. Key responsibilities include overseeing security domains such as AppSec, CloudSec, CI/CD security, and vulnerability management, as well as driving security automation and the adoption of AI-assisted tools. The role also includes leading incident response, supporting compliance efforts, and building security capabilities within engineering teams. Candidates should have a strong background in security engineering, hands-on experience with automation, and practical fluency with AI tools in an engineering context. The position is not a people-management role but carries significant influence and mentorship responsibilities. IFS offers a global, diverse, and flexible work environment focused on innovation and inclusion.
Must have
- Demonstrated experience in security engineering with hands-on involvement in automated security solutions.
- Working knowledge of DevSecOps principles and practices.
- Practical experience with CI/CD tools (e.g., Bitbucket, Jenkins, GitLab, GitHub Actions, or equivalent).
- Proficiency in security platforms, vulnerability management tools, and at least one scripting language (e.g., Python, Bash).
- Comfort working with AI-assisted development and security tools (e.g., AI coding assistants, AI-driven SAST/DAST/SCA triage) as part of the day-to-day toolkit, with the judgment to review and validate AI-generated output.
- Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and remediation approaches.
- Strong communication and collaboration skills with the ability to engage cross-functional teams.
- Familiarity with containerization tools (e.g., Docker, Kubernetes).
- Knowledge of security standards (e.g., NIST, ISO 27001, CIS).
Nice to have
- 5+ years of experience in security engineering, software engineering, or platform engineering.
- Proven track record owning security capabilities or programs at scale.
- Deep expertise across multiple security domains (AppSec, CloudSec, CI/CD security, architecture).
- Advanced proficiency in security automation, tooling strategy, and infrastructure-as-code security, including experience integrating AI-based tools into automated pipelines.
- Demonstrated technical leadership and ability to influence cross-team decisions without formal authority.
- Experience leading security incident response and root-cause analysis.
- Track record mentoring engineers and emerging security leads.
- Experience influencing engineering-wide security standards and practices, including guidance on the responsible use of AI tools (e.g., secure use of AI coding assistants, AI/LLM application security).
- Relevant advanced certifications (e.g., CISSP, CCSK, or equivalent).
Technologies
- Agentic AI
- Bash
- Bitbucket
- CI/CD
- CISSP
- Container Security
- DAST
- DevSecOps
- Docker
- FedRAMP
- Generative AI
- GitHub
- GitHub Actions
- GitLab
- IFS
- Infrastructure as Code
- ISO 27001
- Jenkins
- Kubernetes
- LLM
- NIST
- OWASP
- Penetration Testing
- Python
- SAST
- SOC 2
Highlights
IFS supports hybrid and flexible work arrangements to accommodate diverse needs and lifestyles, while also fostering an inclusive workplace community. The company values diversity and is committed to sustainability and making a positive global impact.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka