Staff DevSecOps Engineer

Job Summary

To enhance security practices, the full-time Staff DevSecOps Engineer will own the engineering side of compliance programs, automate security processes, and ensure robust cloud security while working remotely or in a hybrid setting, preferably on the East Coast.

Key responsibilities

• Own and implement controls for the compliance program (SOC 2 Type 2) and maintain audit readiness
• Build and maintain CI/CD security gates and automate security controls to streamline development workflows
• Develop auto-remediation workflows and enhance the security posture through infrastructure-as-code practices

Required qualifications

• 5+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus
• Deep hands-on experience with cloud security on a major cloud provider
• Strong skills in infrastructure-as-code, particularly with Terraform
• Proven experience in CI/CD security, including building security controls into developer workflows
• Working knowledge of SOC 2 or comparable frameworks and their implementation in engineering environments