Lead InfoSec Engineer, DevSecOps
Core
Embed automated security controls into CI/CD pipelines and build internal DevSecOps tooling to secure cloud-native applications and containerized workloads.
Role type
Senior IC DevSecOps Engineer
Builds
Internal security tooling, pipeline libraries, and automation frameworks for enterprise engineering teams
Domain
Financial services / Cloud Security / DevSecOps
Deliverable
production ML models | product features | infrastructure
Required skills
CI/CD pipeline design, containerization (Docker, Kubernetes), infrastructure-as-code (Terraform, CloudFormation, Pulumi), security testing (SAST, DAST, SCA), scripting (Python, Go), cloud platforms (AWS, Azure, GCP)
Preferred skills
Internal developer platform experience, CSPM/CNAPP, secrets management (HashiCorp Vault), zero trust architecture, financial services compliance frameworks, professional security certifications (CISSP, CISM, CCSP)
Technologies
AWS, Azure, Google Cloud, Docker, Kubernetes, OpenShift, Terraform, CloudFormation, Pulumi, Snyk, Checkmarx, Veracode, HashiCorp Vault, Git
Responsibilities
Embed automated security controls into CI/CD pipelines; Build and maintain internal DevSecOps tooling; Champion developer-first security experiences; Drive cloud-native security architecture; Evaluate and integrate best-of-breed security tools; Support continuous compliance and governance; Provide technical leadership and mentorship; Lead vulnerability management and remediation
Seniority
Senior, hands-on IC
