Lead Agentic Security Engineer
About the role
The Lead Agentic Security Engineer at IFS is a technical leadership role responsible for setting the technical direction for security engineering across the organization. The position involves owning critical security domains such as application security, cloud security, CI/CD security, and vulnerability management, as well as driving cross-team security initiatives and mentoring engineers at all levels. The role emphasizes hands-on engineering, automation, and the adoption of AI-assisted security tools, ensuring security platforms are reliable and scalable. Key responsibilities include leading incident response, influencing architecture, supporting compliance efforts, and championing a pragmatic security culture. The ideal candidate will have deep expertise in security engineering, a strong background in automation, and practical experience with AI tools in an engineering context. IFS is a global company focused on innovation, diversity, and sustainability, offering a flexible and inclusive work environment.
Must have
- Typically 5+ years in security engineering, software engineering, or platform engineering.
- Proven track record owning security capabilities or programs at scale.
- Deep expertise across multiple domains (AppSec, CloudSec, CI/CD security, architecture).
- Strong hands-on engineering and automation background.
- Demonstrated technical leadership and cross-team influence.
- Practical fluency with AI tools in an engineering context — for example AI coding assistants, AI-assisted security scanning and triage, or LLM-based analysis — and the judgment to validate their output rather than trust it blindly.
- Demonstrated experience in security engineering with hands-on involvement in automated security solutions.
- Working knowledge of DevSecOps principles and practices.
- Practical experience with CI/CD tools (e.g., Bitbucket, Jenkins, GitLab, GitHub Actions, or equivalent).
- Proficiency in security platforms, vulnerability management tools, and at least one scripting language (e.g., Python, Bash).
- Comfort working with AI-assisted development and security tools (e.g., AI coding assistants, AI-driven SAST/DAST/SCA triage) as part of the day-to-day toolkit, with the judgment to review and validate AI-generated output.
- Solid understanding of common vulnerabilities (e.g., OWASP Top 10) and remediation approaches.
- Strong communication and collaboration skills with the ability to engage cross-functional teams.
- Familiarity with containerization tools (e.g., Docker, Kubernetes).
- Knowledge of security standards (e.g., NIST, ISO 27001, CIS).
Technologies
- Agentic AI
- Bash
- Bitbucket
- CI/CD
- Container Security
- DAST
- DevSecOps
- Docker
- FedRAMP
- Generative AI
- GitHub
- GitHub Actions
- GitLab
- IFS
- Infrastructure as Code
- ISO 27001
- Jenkins
- Kubernetes
- LLM
- NIST
- OWASP
- Penetration Testing
- Python
- SAST
- SOC 2
Highlights
IFS offers hybrid and flexible work arrangements to support diverse needs and lifestyles, with an emphasis on community and belonging. The company values inclusivity and provides opportunities to engage with colleagues globally. No specific application deadline or visa requirements are mentioned.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka