Staff DevSecOps Engineer

Join our team as a Staff DevSecOps Engineer, where you will own the engineering side of our compliance program, operate our compliance automation platform, and productize compliance.

Responsibilities

• You will also manage cloud security posture and runtime security tooling, triage and remediate findings, build auto-remediation workflows, and maintain CI/CD security gates.
• Additionally, you will help close the prototype-to-production gap, make secure-by-default the norm, and build the automation the team runs on.
• You will partner with corporate security and GRC functions while building and maturing our in-house security capability.
• Own the engineering side of the compliance program, implementing controls, collecting evidence, and ensuring audit readiness.
• Operate the compliance automation platform, integrating evidence pipelines and mapping controls to real implementation.
• Build and maintain CI/CD security gates, implementing security controls as reusable pipeline components and enforcing automated policy.

Security monitoring and detection/alerting design

• Hands-on vulnerability management at scale: triage, prioritization, SLA-driven remediation, and the automation to make it sustainable
• Proven CI/CD security experience: building pipeline security controls (SAST/SCA, secret scanning, dependency and container scanning) into developer workflows

Requirements

• Experience standing up or maturing an in-house security function
• Strong coding/scripting ability to build automation, not just configure tools — you write the pipelines, modules, and tooling that scale security across many services
• Multi-cloud exposure and experience securing an internal developer platform
• Strong infrastructure-as-code skills, especially Terraform, including policy-as-code
• Experience applying AI/LLM tooling to security operations — auto-remediation, evidence generation, agentic workflows
• Working knowledge of SOC 2 (or comparable frameworks) and what it takes to implement and evidence controls in a real engineering environment
• 5+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus (Staff level: 8+ years and a track record of building security functions or programs)
• Deep hands-on cloud security experience (compute, networking, IAM, key management, logging) on a major cloud provider

Preferred

• Fluency with the categories of modern cloud security tooling — CSPM, ASPM/SAST and secret scanning, compliance automation, and SIEM (e.g., tools such as Wiz, Prisma Cloud, Snyk, Drata, Vanta, or equivalents)

Pay

USD 150,000 - 225,000