Senior DevSecOps Engineer

Job Summary

To enhance security practices within the organization, the full-time Senior DevSecOps Engineer will manage compliance automation, cloud security posture, and CI/CD security controls, working remotely or in a hybrid environment with a preference for East Coast candidates.

Key responsibilities

• Own the engineering side of the compliance program, implementing controls and maintaining audit readiness
• Build and maintain CI/CD security gates and automation workflows to ensure secure development practices
• Collaborate with corporate security and GRC functions to mature in-house security capabilities

Required qualifications

• 5+ years of experience in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus
• Deep hands-on cloud security experience on a major cloud provider
• Strong infrastructure-as-code skills, particularly with Terraform
• Proven experience in building CI/CD security controls integrated into developer workflows
• Working knowledge of SOC 2 or comparable frameworks and their implementation in engineering environments