About this role
We're hiring a Senior AWS Cloud Security / DevSecOps Engineer to lead AWS WAF/API security and expand layer‑7 inspection across a large, high‑traffic environment. You'll contribute to policy strategy, own tuning, develop availability‑safe mitigations (including virtual patching), and build incident plans that isolate cause and minimize growth. You'll bring AWS networking experience and zero trust fundamentals. Additionally, you'll have automation skills, including proficiency in Python and Tines. You'll partner with SRE/TOC/SecOps to ensure logging and telemetry are available during incidents. Furthermore, you'll improve reliability over time. We also value innovators and tinkerers who run safe experiments and adopt new technology thoughtfully, without compromising customer trust. We also value AI literacy and an AI security mindset: understanding agentic/GenAI architectures, inherent risks, and network‑layer mitigations that allow safe adoption in regulated environments. You will report to the Senior Manager Network Security.
What you'll own / deliver
AWS L7 inspection & network protection, including WAF, firewall, IPS, and proxy patterns with safe rolloutsWAF & API security: tuning, false‑positive reduction, and emergency mitigations/virtual patchingAI / agentic integration security using least‑privilege gateways, segmentation, logging, and rate controlsEdge performance: CDN, caching, compression, and edge‑to‑origin troubleshootingIncident response engineering in partnership with SRE/TOC/SecOps, improving telemetry and runbooksAutomation with Python and Tines to enforce guardrails and reduce toilCloud security posture awareness across CSPM and SASE/SSE in AWS environments Required Experience & Capabilities
You have deep AWS networking experience at production scale (segmentation, traffic flows, failure modes, safe change).Zero Trust network design (least privilege, controlled access, policy‑driven segmentation).3+ years of experience DevSecOps and automation skills (Python, Tines).Web application and API security expertise with availability‑safe controls.AI security literacy, including GenAI risks and mitigations.Excellent documentation, cross‑team influence, and incident response discipline.3+ years of experience in regulated environments (PCI DSS 4.x; familiarity with FFIEC / FinCEN expectations).Audit and evidence‑driven control design.What Success Is
Secure, reliable L7 inspection and WAF/API protections with minimal customer impact.Improved edge performance without weakening security.Faster incident response (lower MTTR) through strategies and telemetry.AI integrations that follow secure, least‑privilege patterns with auditability. Our benefits include: Medical, life and dental insurance, Asociacion Solidarista, International Share Save Plan, Flex Work/Work from home, Paid time off, Annual Performance Bonus, Education Reimbursement, Family Bonding, Bereavement Leave, Referral Program, and more.
This is a fully remote job opportunity. #LI-RemoteOur uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward and recognition, volunteering... the list goes on. Experian's people first approach is award-winning; Great Place To Work™ in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.