Employer Active
Job Alert
You will be updated with latest job alerts via emailJob Alert
You will be updated with latest job alerts via email$ 88900 - 151100
1 Vacancy
Company Overview
KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop smartphone wearable device voicecontrolled gadget flexible screen VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles integrated circuits packaging printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration research and development. KLA focuses more than average on innovation and we invest 15 of sales back into R&D. Our expert teams of physicists engineers data scientists and problemsolvers work together with the worlds leading technology providers to accelerate the delivery of tomorrows electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.Job Description/Preferred Qualifications
The Cybersecurity group at KLA is dedicated to protecting global business operations by proactively identifying threats securing cloud and onprem environments and ensuring the integrity of critical systems and intellectual property. As part of our Cyber Architecture and Engineering team we are seeking a Senior DevSecOps Architect to lead the integration of security into the software development lifecycle (SDLC) CI/CD pipelines cloudnative applications AIdriven chatbot systems and data analytics platforms like Databricks.
This role will be responsible for designing and implementing security controls across DevOps workflows cloud environments software applications data platforms and AIdriven chatbots. The ideal candidate will work closely with development cloud IT data engineering and security teams to drive a securityfirst culture while enabling innovation and agility.
DevSecOps Strategy & Implementation: Define and execute a DevSecOps roadmap that integrates security into CI/CD pipelines Kubernetes serverless applications and AIdriven chatbot platforms
Azure Chatbot Security: Implement secure AI and chatbot architectures in Azure ensuring compliance with security standards data protection and access control.
Databricks Security & Data Protection: Secure data lakes ML models and Databricks notebooks by implementing rolebased access control (RBAC) encryption and compliance monitoring
Security Automation & Infrastructure as Code (IaC): Automate security controls using Terraform Ansible Bicep and Azure Policy to enforce security in cloudnative deployments
Azure Key Vault & Secrets Management: Design and implement secure identity and secrets management strategies ensuring API keys encryption keys and credentials are properly managed.
Digital Rights Management (DRM): Implement data protection rights management and access controls to ensure secure handling of intellectual property digital assets and sensitive data across applications and data platforms
Cloud & Container Security: Establish best practices for securing containers Kubernetes microservices and serverless functions including runtime security and policy enforcement
MITRE ATT&CKBased Threat Modeling & Risk Management: Utilize MITRE ATT&CK techniques to enhance threat modeling detection engineering and security response strategies for applications infrastructure and data environments
Zero Trust & API Security: Enforce security controls around OAuth SAML JWT Zero Trust and API gateways to secure applications chatbot interactions and Databricks data pipelines
Security Monitoring & Incident Response: Leverage MITRE ATT&CK tactics to design threat hunting detection and response strategies using SIEM XDR and threat intelligence tools
Compliance & Governance: Ensure DevSecOps implementations align with NIST CSA CIS ISO 27001 and regulatory requirements (e.g. SOX GDPR CMMC HIPAA)
Collaboration & Training: Partner with development IT and security teams to build security awareness and advocate for secure coding DevSecOps best practices AI security and data security
Security certifications (CISSP CSSLP CCSP CKS OSCP GCSA or similar)
Handson experience with CI/CD tools (Azure DevOps GitHub Actions GitLab CI/CD Jenkins ArgoCD etc.
Expertise in Azure Security Services including Azure Key Vault Azure Sentinel Defender for Cloud and Security Center
Experience securing AIdriven chatbot platforms (Azure Bot Service OpenAI GPT or similar)
Strong knowledge of cloud security (Azure AWS) and container security (Kubernetes Istio Docker)
Experience securing Databricks workloads data lakes ML pipelines and Spark environments
Familiarity with Digital Rights Management (DRM) strategies for protecting sensitive assets
Strong experience leveraging MITRE ATT&CK for threat modeling detection engineering and adversary simulation
Experience implementing SAST DAST SCA and RASP security solutions in DevOps workflows
Familiarity with SOAR SIEM XDR and threat intelligence tools
Experience working with API security OAuth2 JWT SAML and microservices security
Strong understanding of secure coding principles threat modeling and OWASP Top 10
Excellent communication skills to influence development teams data engineering teams and executive leadership
Minimum Qualifications
Bachelors degree in Cybersecurity Computer Science Software Engineering or equivalent experience in a related field
Minimum five 5 years of experience in DevSecOps cloud security or cybersecurity architecture
Handson expertise in securing cloudbased AI/chatbot solutions data platforms (Databricks) CI/CD workflows and software development
Strong background in cloud security automation and compliance
Ability to design scalable and secure application architectures
Passion for fostering a securityfirst DevOps culture
Interns are eligible for some of the benefits listed. Our pay ranges are determined by role level and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors including state minimum pay wage rates location jobrelated skills experience and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable your recruiter can share more about the specific pay range for your preferred location during the hiring process.
KLA is proud to be an Equal Opportunity Employer. We do not discriminate on the basis of race religion color national origin sex gender identity gender expression sexual orientation age marital status veteran status disability status or any other status protected by applicable law. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process to perform essential job functions and to receive other benefits and privileges of employment. Please contact us at or at to request accommodation.
Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview to become an employee or for equipment. Further KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLAs Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication an interview an offer of employment or that an employee is not legitimate please send an email to to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.
Required Experience:
Senior IC
Full-Time