Senior DevSecOps Engineer

What you'll do

• Detect and remediate vulnerabilities, integrate security into development, and manage secrets, patching, and infrastructure hardening.
• Own SOC 2, GDPR, and ISO 42001 compliance efforts, including audits, evidence, and remediation.
• Manage security diligence for customers and vendors, and oversee endpoint security and corporate access controls.

What they ask for

• 5–10 years of experience in security engineering, application security, or infrastructure security roles.
• Hands-on SOC 2 audit experience and experience with at least one other compliance framework (GDPR, ISO 27001, PCI-DSS, or similar).
• Comfort reading code, reviewing AWS infrastructure, and working in a CI/CD environment.
• Experience with vulnerability management tooling and third-party penetration tests; familiarity with AWS Secrets Manager and IAM best practices.

Nice to have

• Prior experience at a fintech or other regulated-industry startup.
• Familiarity with ISO 42001 or AI governance frameworks, MDM platforms, or international security/compliance expansion.

Pay

$165,000–$240,000 USD base salary; $165K – $230K USD (base salary)

Tools

AWS, CI/CD, Snyk, Semgrep, Qualys, Burp Suite, AWS Secrets Manager, IAM

AI focus

Lead ISO 42001 certification efforts and establish and maintain AI management system controls.