Security Engineer – DevSecOps and Security Architect

PhysicsX is hiring a Security Engineer – DevSecOps and Security Architect in New York, United States. It pays $200k-$300k a year and Level rates it ; you can apply on PhysicsX.

Level's read on this job

Works on AI ●●●○ is how Level rates this cybersecurity role: the daily work is on AI products, without building the model.
The listed pay starts 26% above the typical cybersecurity posting on Level.
PhysicsX mentions visa sponsorship in this posting.
Level lists 38 other open roles at PhysicsX.

AI in this role

About us

Re-architecting Engineering for the Age of Intelligence

PhysicsX is the physics AI company for industrials. The company’s mission is to accelerate hardware innovation by overhauling what industrial engineering and manufacturing look like today. PhysicsX is building a new simulation software stack to deliver deep physics AI enablement across the entire engineering lifecycle. The company partners with leading organisations in aerospace & defence, automotive, semiconductors, materials, and energy & renewables, supporting them on some of their most critical and complex challenges. PhysicsX is headquartered in the United Kingdom, with offices in London, New York, and Singapore and an expanding presence in the Bay Area.

The Role

As a Principal Security Engineer, you will partner closely with engineering teams to design and implement secure development practices, integrate security into our CI/CD pipeline, and lead security and design reviews.

You’ll bring deep expertise in DevSecOps, application security, hands-on experience securing web applications and APIs, and a strong understanding of modern development workflows. This is a unique opportunity to shape the future of our security program while working in a high-ownership, high-impact environment.

What you will do

Architect and integrate security tooling directly into CI/CD pipelines to automate the detection and prevention of vulnerabilities, ensuring "shift-left" security at scale.
Lead threat modeling and secure design reviews for web applications, APIs, and cloud services.
Oversee the end-to-end product vulnerability lifecycle, from issue triage, prioritization, remediation support, with clear risk communication.
Drive secure coding standards, develop playbooks, and provide hand-on training and mentorship to instill a security-first mindset across the organization.
Design and scale secure development practices by collaborating cross-functionally with engineering teams throughout the entire software lifecycle.
Engage with customers during security reviews

What you bring to the table

10+ years in security, with a focus on DevSecOps and security design reviews
Hands-on experience with secure coding, OWASP Top 10, threat modeling, and SDLC integration
Experience with GitHub/GitLab, CI/CD, IaC, and containerized environments
Experience deploying and working with SAST tooling (e.g. Semgrep, Snyk)
Experience developing in Python and Go.
Track record of balancing pragmatism and security rigor in a fast-paced setting
Strong communication skills

Nice to Have Skills

Understanding of AI security fundamentals and how application security and AI security intersect
Experience securing cloud infrastructure
Participation in bug bounty programs and managing security disclosure
Familiarity with the BSIMM framework
Experience in cloud security including identity and access management and cloud-native services.

What we offer

Build what actually matters

Help shape an AI-native engineering company at a formative stage, tackling problems that genuinely matter for industry and society. This is work with real-world impact - and something you can be proud to stand behind.

Learn alongside exceptional people

Work with a high-caliber, collaborative team of engineers, scientists, and operators who care deeply about doing great work, and about helping each other get better. We come from diverse backgrounds, but we share a commitment to operating at the highest level and addressing some of the most complex challenges out there. If you’re ambitious, thoughtful, and driven by impact, you’ll feel at home.

Influence over hierarchy

We operate with a flat structure: good ideas win - wherever they come from. Questioning assumptions and challenging the status quo isn’t just welcomed, it’s expected.

Sustainable pace, long-term ambition

Building meaningful technology is a marathon, not a sprint. We believe in balancing focused, ambitious work with a life beyond it. Our hybrid model blends time together in our New York office with work-from-home days, giving you the flexibility to work sustainably while staying connected in person.

UK Benefits:

Equity options; 10% pension employer contribution; 25 days holiday plus public holidays; private health insurance; enhanced parental leave; free lunch onsite

US Benefits:

🚀 Equity options - share meaningfully in the company you’re helping to build.

💰 5% contribution to 401(k) - build long-term security with a strong retirement plan.

🍽️ Free team lunch 1x/week - good food, great company, and space to connect.

🏥 Private health insurance – comprehensive cover for you, offering total peace of mind.

👶 Enhanced parental leave – 3 months full pay paternity and 6 months full pay maternity leave, to provide extra flexibility during the moments that matter most.

☀️ 20 days of Annual Leave (+ Public Holidays) - because taking time to rest matters.

📈 Personal development – dedicated support for learning, development, and leveling up over time.

💪 Gympass / Wellhub (subsidized) – for you and up to 3 family members, supporting both physical and mental wellbeing.

💳 Flexible Spending Account (FSA) – set aside pre-tax dollars for eligible healthcare expenses.

🔎 Watch this space, we’re continuing to build this as we grow…

Salary for this position in the USA is from $200,000 to $300,000

We value diversity and are committed to equal employment opportunity regardless of sex, race, religion, ethnicity, nationality, disability, age, sexual orientation or gender identity. We strongly encourage individuals from groups traditionally underrepresented in tech to apply. To help make a change, we sponsor bright women from disadvantaged backgrounds through their university degrees in science and mathematics. We collect diversity and inclusion data solely for the purpose of monitoring the effectiveness of our equal opportunities policies and ensuring compliance with employment and equality legislation. This information is confidential, used only in aggregate form, and will not influence the outcome of your application.

How we rate this

Security Engineer – DevSecOps and Security Architect at PhysicsX rates 63 out of 100 for how much of the daily work is AI. That makes it Works on AI (AI Level 3 of 4). The level is about AI in the job, not seniority.

Classification

Works on AI. The daily work is on AI products, without building the model.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Security Engineer – DevSecOps and Security Architect is an open job at PhysicsX.
Level rates this role AI Level 3 of 4: Works on AI.
The listed salary is $200k-$300k a year.
The role is based in New York, New York.
The job was posted on February 5, 2026.
Applications are handled by PhysicsX. Apply on PhysicsX

Prepare for this job

Built from this posting and from similar jobs on Level.

Also common in cybersecurity jobs at this level

LLM AWS AI agents Kubernetes Azure Google Cloud

Pay

This job starts at: $200k
Typical cybersecurity job: $159k

This posting starts 26% above the typical cybersecurity job. See cybersecurity jobs

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. You get your review by email within 24 hours.

Get a free CV review Get your CV rewritten Check your resume with the ATS resume checker

Get new cybersecurity jobs (Works on AI ●●●○ or higher) by email

One email a week with the new cybersecurity jobs (Works on AI ●●●○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.