Staff DevSecOps Engineer
Core
Lead engineering for cloud security, compliance automation, and secure-by-default practices to enable modern product engineering at scale.
Role type
Staff DevSecOps Engineer (Security Platform & Compliance)
Builds
Reusable security platforms, automation pipelines, policy-as-code guardrails, and AI-assisted remediation tools.
Domain
Cloud Security, DevSecOps, Compliance (SOC 2), Infrastructure as Code
Deliverable
production ML models | product features | infrastructure
Required skills
Cloud security (compute, networking, IAM, logging), Infrastructure as Code (Terraform), Policy as Code, CI/CD security controls (SAST, SCA, secret scanning), Vulnerability management at scale, SOC 2 compliance implementation, Multi-cloud security, Internal developer platform security, AI/LLM for security operations, Security monitoring and alerting design, Coding and scripting for automation
Preferred skills
Experience maturing in-house security engineering functions, Experience with CSPM and SIEM tooling, Experience with agentic workflows
Technologies
Terraform, SAST, SCA, Secret scanning, SBOM, CSPM, SIEM, LLM, AI
Responsibilities
Own SOC 2 Type 2 compliance program implementation and audit readiness; Operate compliance automation platforms and evidence pipelines; Productize compliance via policy-as-code and security guardrails; Manage cloud security posture and runtime security; Triage and remediate security findings with automation; Build automated remediation workflows using AI; Design CI/CD security gates; Encode security requirements into IaC; Develop reusable infrastructure modules and internal tooling; Partner with security and GRC teams to mature internal capabilities
Seniority
Staff, hands-on IC with program ownership
