Senior DevSecOps Engineer | Bankrate
Core
Technical owner of security posture and compliance automation for Bankrate's platform engineering, building tools to bake security into the development lifecycle and automate toil.
Role type
Senior IC DevSecOps Engineer (Platform Engineering)
Builds
Compliance automation platform, CI/CD security gates, auto-remediation workflows, and internal security tooling.
Domain
Fintech / Cloud Security / Compliance
Deliverable
production ML models | infrastructure
Required skills
Cloud security (compute, networking, IAM, key management), Infrastructure-as-Code (Terraform, policy-as-code), CI/CD security (SAST/SCA, secret scanning, SBOM), Vulnerability management at scale, SOC 2 implementation, Cloud security tooling (CSPM, ASPM, SIEM), Coding/scripting for automation, AI/LLM tooling for security operations.
Preferred skills
Multi-cloud exposure, Internal developer platform experience, Security monitoring and detection design, Experience maturing in-house security functions.
Technologies
Terraform, Wiz, Prisma Cloud, Snyk, Drata, Vanta, SAST/SCA tools, Container/IaC scanners, SIEM, AI/LLM frameworks.
Responsibilities
Own engineering side of SOC 2 Type 2 compliance program; Operate compliance automation platform and map controls to implementation; Productize compliance via policy-as-code and automated evidence generation; Own cloud security posture management and runtime security tooling; Triage and remediate security findings against SLAs; Build auto-remediation workflows including AI-assisted pipelines; Build and maintain CI/CD security gates; Encode security controls into infrastructure-as-code; Close prototype-to-production gap with secure-by-default systems; Build reusable automation modules and agentic tooling; Partner with corporate security and GRC functions.
Seniority
Senior, hands-on IC (Staff level: 8+ years)