Full-Time

Senior DevSecOps Application Security Engineer

Posted on 1/30/2026

Plume

Plume

201-500 employees

AI-driven cloud-based WiFi management for CSPs

No salary listed

Hyderabad, Telangana, India

In Person

Category
IT & Security (1)
Required Skills
Bash
Kubernetes
Python
Heroku
JavaScript
Github Actions
Git
AWS
Go
Cryptography
Jenkins
Terraform
REST APIs
DevOps
Requirements
  • Bachelor’s degree in Information Security, Computer Science, Computer Engineering or a related field.
  • 5+ years of professional experience in Security Engineering, AppSec or DevSecOps
  • 2 years experience in Cloud DevSecOps with proven experience implementing security controls within the CI/CD pipeline and/or Kubernetes.
  • 1 year hands-on experience with software coding in AI agents/skills, Python, Shell, Go, and JavaScript, and the ability to understand code/APIs for SaaS products.
  • Good knowledge of public cloud architectures such as AWS, and cryptographic best practices.
  • Experience with SAST, SCA DAST, container security and secure baselines.
  • Understand technologies such as Terraform, Helm Charts, Jenkins, Heroku, Circle CI, GitHub Actions, Cycode and how to use those technologies to secure a dynamic deployment environment.
  • Proven ability to work independently, demonstrate leadership, and influence change.
  • Effective collaboration across teams and disciplines, even in highly ambiguous situations, with a track record of delivering quality results quickly.
  • Strong communication, written, presentation, and interpersonal skills.
  • Familiarity with security framework policies, processes, and controls, such as ISO27001, ISO27701, SOC2, NIST CSF, and CIS, is a plus.
  • Certifications such as OSCP, CEH, CISSP, AWS, CIPP, CIPPT, etc., are a plus.
Responsibilities
  • Lead the Application Security, AI Coding Security and DevSecOps domain, focusing on reducing software security risks.
  • Manage Application security tools in SAST, DAST, IaC, SCA, Secrets, Leaks using your understanding of secure coding principles to guide policies.
  • Design and deploy best practices for AI-assisted coding to develop security roles (skills) that prevent AI from introducing security defects.
  • Run the Security Champions program using metrics to show risk and improvements
  • Improve the DevOps pipeline to protect cloud applications, resources and APIs.
  • Implement and maintain controls within the Continuous Integration/Continuous Deployment (CI/CD) pipeline to meet necessary security standards
  • Develop and maintain security policies, procedures, and guidelines, recommending necessary changes to ensure full compliance with applicable requirements.
  • Advise engineering and development teams on security best practices and design principles by using your knowledge of SaaS and IoT architecture approaches
  • Enforce security policies for cloud deployments, manage centralized configurations, and monitor systems for security compliance.
  • Serve as the subject matter expert (SME) for security solutions, maintaining documentation and advising on their technologies and operations.
  • Collaborate with security and IT teams to identify threats and areas for improvement, creating safer software and application deployments and measuring decreased risks and issues.
Desired Qualifications
  • Familiarity with security framework policies, processes, and controls, such as ISO27001, ISO27701, SOC2, NIST CSF, and CIS, is a plus.
  • Certifications such as OSCP, CEH, CISSP, AWS, CIPP, CIPPT, etc., are a plus.

Plume builds cloud-based, software-defined WiFi management solutions for communications service providers (CSPs) to offer better home and small‑business internet experiences. Its products, such as HomePass for residential users and WorkPass for small businesses, use AI to adapt and optimize WiFi automatically, while providing real-time diagnostics and network performance tools. CSPs license Plume’s software and receive ongoing support and analytics to monitor and improve service quality, reduce churn, and deliver security and control features to end customers. Plume differentiates itself through AI-driven, cloud-managed WiFi that provides end-to-end visibility and diagnostics for CSPs, enabling them to manage large-scale networks more efficiently. The goal is to help CSPs extend reliable, secure, and easy-to-use WiFi services to a broad customer base by licensing software and offering analytics and support.

Company Size

201-500

Company Stage

Late Stage VC

Total Funding

$722.4M

Headquarters

Palo Alto, California

Founded

2015

Simplify Jobs

Simplify's Take

What believers are saying

  • TELUS achieved 80% digital resolution rate, preventing 550,000 call center calls.
  • Sweepr acquisition enables faster issue resolution with real-time network context integration.
  • 5G FWA expansion with Zyxel extends OpenSync into hybrid fiber-wireless deployments.

What critics are saying

  • OpenSync commoditizes WiFi management, enabling ISPs to integrate competing AI vendors.
  • Wi-Fi 7 hardware advances reduce demand for Plume's cloud optimization layer.
  • Major CSPs develop in-house AI platforms using Plume's telemetry data insights.

What makes Plume unique

  • OpenSync framework enables vendor-agnostic deployment across 400+ ISPs globally.
  • AI-orchestrated platform combines network intelligence with Sweepr's customer care automation.
  • Cloud platform connects nearly 500 million devices, providing unmatched telemetry dataset.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Lifetime Plume HomePass membership (availability based on geographic location).

Allowance for home office set-up.

Monthly data or phone allowance.

Plume employee referral bonus program.

Public Transportation reimbursement.

Retirement savings contributions

Employee discounts.

Patent submission support and incentive award program.

Competitive and comprehensive health insurance coverage and extended benefits such as dental, vision, life, short/long-term disability insurance, and FSA/HSA (detailed coverage may vary by location).

Employee assistance program.

Generous vacation policy to ensure time to recharge (open paid time off or generous accrued paid time off based on location).

Health and wellness reimbursement and a Premium Strava membership.

Holistic health platform with Walking on Earth.

Generous parental leave policy.

Living our Plumian traits.

Online and in-person team-building events.

PlumeStrong - our corporate social responsibility program designed to apply our resources (time, brainpower, product, money) for good.

Remote/flexible work arrangements.

Professional development opportunities.

Immigration support.

Inclusive workplace, where everyone feels at home.

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

-2%

2 year growth

0%
PR Newswire
Mar 18th, 2026
FPT partners with Plume to bring AI-powered Wi-Fi optimisation to Vietnamese households

FPT Telecom, one of Vietnam's leading internet service providers, has partnered with Plume to deploy the Plume Platform across its subscriber base. The collaboration aims to enhance in-home Wi-Fi experiences through AI-powered optimization and application prioritization. The Plume Platform uses cloud-based analytics and machine learning to intelligently identify and prioritize applications such as streaming, video calls and gaming, ensuring smoother performance across connected devices. The system continuously adapts by learning from patterns across tens of millions of households globally. FPT Telecom, a subsidiary of FPT Corporation, previously pioneered Wi-Fi 6 and Wi-Fi 7 deployment in Vietnam and offers broadband services up to 10Gbps. The platform also provides advanced security features including intrusion detection and device quarantine for subscribers.

PR Newswire
Feb 26th, 2026
Plume launches open agentic AI platform for ISPs with 80% digital resolution rate

Plume Design has announced an evolution of its platform, delivering what it calls the only open, vendor-agnostic agentic AI orchestration platform for internet service provider operations. Built on insights from 500 million devices, the platform autonomously monitors network conditions, diagnoses issues and resolves subscriber problems across any network, hardware or AI model. The enhanced platform integrates Sweepr, a customer care orchestration system, to support the complete ISP customer journey from onboarding through support and retention. The system works across any customer premises equipment vendor, cloud partner and AI model. TELUS prevented over 550,000 call centre calls using the platform, achieving an 80% digital resolution rate and 60% improvement in team productivity. New deployments can go live in as little as 12 weeks. Plume serves more than 450 ISPs across 58 countries.

Plume
Feb 12th, 2026
Powered by Plume's cloud-based, AI-optimized platform, Spectrum launches Invincible WiFi

Powered by Plume's cloud-based, AI-optimized platform, Spectrum launches Invincible WiFi. WiFi 7 is here, and strong partnerships are what turn new standards into better everyday experiences. Congratulations to Spectrum on the launch of Invincible WiFi and their WiFi 7 Extenders, bringing faster, more consistent whole-home connectivity to customers. With integrated 5G backup and battery support, Invincible WiFi is designed to help keep customers connected through disruptions and power outages. Plume is proud to partner with the Spectrum team to bring this to life. Delivering WiFi 7 at scale means applying AI to real home conditions, including disruptions, so performance stays strong every day. That dependable performance is what earns subscriber confidence. Powered by Plume's cloud-based, AI-optimized platform, Spectrum's always-on WiFi 7 experience combines advanced hardware with intelligence that adapts in real time. Together, Plume is focused on reliability, resilience, and simpler day-to-day management, helping ISPs deliver the kind of consistent experience that keeps subscribers confident in their connection.Spectrum's Invincible WiFi is the first solution to combine WiFi 7, automatic 5G backup, and 8-hour battery protection in a single system to keep devices connected to the same network even during outages, with no manual intervention required. As Dan Herscovici, President and CEO of Plume, shared: "WiFi 7 is a major leap forward, but what matters most is dependable performance in everyday life. By working closely with partners like Spectrum on Invincible WiFi, we apply AI that adapts in real time and helps build better connections with consistent, everyday reliability to power the moments that matter." Excited for what's ahead as Plume keep building with partners worldwide. Big thanks to the Spectrum team for leading the way.

PR Newswire
Jan 21st, 2026
Plume appoints Rebecca Stone as chief marketing officer to deepen ISP engagement

Plume, a cloud-managed Wi-Fi and smart home services provider for ISPs, has appointed Rebecca Stone as chief marketing officer. Stone brings over 20 years of experience in enterprise and service provider marketing, most recently serving as senior vice president of revenue marketing at Cisco, where she oversaw marketing for the company's $50 billion networking portfolio. At Plume, Stone will oversee go-to-market strategy and deepen engagement with ISP customers whilst communicating the company's capabilities in Wi-Fi management, cybersecurity and customer care. Before Cisco, she was CMO at Meraki, doubling the marketing team and growing marketing-sourced pipeline contribution to 35%. Plume's platform connects nearly half a billion devices across more than 400 ISPs globally.

The Fast Mode
Jan 13th, 2026
Plume Design Acquires AI-Powered Customer-Care Platform Sweepr to Enhance ISP Services

Plume Design acquires ai-powered customer-care platform Sweepr to enhance ISP services. Plume Design, the leader in intelligent services for ISPs serving connected homes and small businesses, announced the acquisition of Sweepr, an AI-powered customer-care orchestration platform built for service providers. Sweepr processed more than 1 million customer interactions in 2025, helping operators deliver outstanding digital care experience to subscribers. Founded in 2018 and headquartered in Dublin, Ireland, Sweepr helps telecom operators deliver personalized support journeys that increase digital engagement, reduce call center costs, and improve customer satisfaction across use cases such as onboarding, technical support, and billing. The acquisition brings together two complementary strengths: Plume's real-time, device-level network intelligence and Sweepr's AI-native, no-code orchestration engine that connects into the systems providers already rely on. The combined platform helps ISPs move from seeing an issue to solving it faster,often without a call. Using real-time home network context, AI recommends the next best action, guides agents and subscribers, and safely automates resolution. Plume's cloud platform connects nearly half a billion devices, creating an unmatched foundation of real-world network and device telemetry across diverse home environments. By combining that intelligence with Sweepr's orchestration and interaction data, the platform continuously improves which actions work best in specific scenarios so providers can deploy proven workflows faster and refine them based on measurable results. The combined offering unifies intelligence, automation, and care into one platform that can be deployed quickly and integrated deeply. Key capabilities include: AI-guided diagnosis and resolution grounded in live in-home context - Detects issues, identifies likely root causes, and triggers the right workflow using real-time network and device signals. Context that follows the subscriber across every channel - Delivers true omni-channel experiences across app, web, IVR, chat, socials and live agents, without making the subscriber repeat information. Lower cost-to-serve through higher digital containment and faster agent resolution - Uses guided flows, dynamic knowledge, and recommends next best actions to reduce escalations, shorten handle time, and avoid unnecessary truck rolls. Proactive care and prevention - Spots degrading in-home conditions early and solves or mitigates issues before the subscriber experiences a problem. Fast time-to-value - Leverages no-code journey design, pre-built use cases, and integrations with existing OSS/BSS, CRM, IVR, CCaaS, and related operational systems. Sweepr will continue to be offered as a standalone platform, with ongoing support and continuity for existing customers. It will also be commercially available to Plume customers globally, extending its orchestration capabilities alongside Plume's network intelligence. Together, the combined platform will enable providers to identify monetization opportunities by using real-time context and behavior to proactively engage subscribers with relevant offers. Alan Coleman joins Plume as Chief Product Officer, leading combined product strategy and roadmap execution across the integrated platform. Before Sweepr, Coleman and Co-Founder Jim Hannon founded Brite:Bill, which was acquired by Amdocs in 2016. Hannon joins Plume as Chief Architect, focusing on technology and execution across the combined customer experience and orchestration roadmap. Coleman and Hannon bring deep telecom and broadband software experience and will work alongside Plume's leadership team to accelerate outcomes for their service provider customers. Dan Herscovici, President and CEO of Plume With Sweepr, The Fast Mode is connecting AI to the moments that matter, like when a subscriber needs help. By combining Sweepr's care orchestration with unmatched visibility across Plume's global dataset, The Fast Mode is turning network intelligence into action at scale. This is a landmark shift in how providers reduce costs, improve reliability, and build trust that drives long-term subscriber value. Alan Coleman, Co-Founder of Sweepr Sweepr adds context to every interaction - who the subscriber is, what equipment they have, what's happening in the home right now, and what's already been tried - so providers can solve the right problem the first time. Bringing that context together with Plume's real-time network intelligence means fewer repeat calls, fewer truck rolls, and support journeys that feel clear and consistent for subscribers.

INACTIVE