Staff DevSecOps Engineer | Bankrate
Core
Technical owner of security posture and compliance automation, building self-service tooling to bake security into the development lifecycle and automate toil.
Role type
Staff DevSecOps Engineer (Platform Engineering)
Builds
Compliance automation platform, cloud security posture management tooling, CI/CD security gates, and AI-assisted auto-remediation workflows.
Domain
Financial Technology / Cloud Security / Compliance
Deliverable
production ML models | infrastructure
Required skills
Cloud security engineering, Infrastructure-as-Code (Terraform), CI/CD security integration, Vulnerability management at scale, Policy-as-code, Security monitoring and detection design, AI/LLM tooling for security operations, Multi-cloud security, Internal developer platform security.
Preferred skills
Experience maturing an in-house security function, SOC 2 implementation experience, Experience with modern cloud security tooling (CSPM, SAST, secret scanning).
Technologies
Terraform, Wiz, Prisma Cloud, Snyk, Drata, Vanta, SAST/SCA tools, Container scanning tools, IaC scanning tools, SIEM.
Responsibilities
Own engineering side of SOC 2 compliance program; Operate compliance automation platform; Productize compliance via policy-as-code; Own cloud security posture management and runtime security; Triage and remediate security findings against SLAs; Build auto-remediation workflows including AI-assisted pipelines; Build and maintain CI/CD security gates; Encode security controls into infrastructure-as-code; Help close prototype-to-production gap; Build reusable automation modules and agentic tooling; Partner with corporate security and GRC functions.
Seniority
Staff, hands-on IC with program ownership