Senior DevSecOps Engineer | Bankrate

About the role

About Our Client:The organization operates in the financial services information sector, providing consumers with reliable data and tools to make informed financial decisions regarding mortgages, credit cards, savings, and other financial products. It addresses the challenge of transparency and accuracy in financial rates by combining proprietary data, advanced technology, and extensive market coverage. The company’s rate data serves as a national standard, used by the Federal Reserve and major publishers and policymakers, indicating significant impact and wide reach.

About the Opportunity:The Senior DevSecOps Engineer will be responsible for leading the engineering aspects of the organization''s security posture. This role focuses on integrating security deeply into the development lifecycle, automating compliance and remediation processes, and enabling fast and secure product delivery. The position carries broad ownership and aims to enhance security by building scalable, automated solutions that empower engineering teams and maintain audit readiness.

Responsibilities

• Own engineering components of the compliance program, including implementing controls and maintaining audit readiness.
• Manage compliance automation platforms, integrating evidence pipelines and mapping controls.
• Develop policy-as-code and automated evidence generation to streamline compliance.
• Oversee cloud security posture management and runtime security tooling.
• Triage and remediate security findings within established SLAs.
• Design and implement automation and alerting systems to manage security workload.
• Build auto-remediation workflows incorporating AI assistance.
• Create and maintain CI/CD security gates and reusable pipeline components.
• Encode security and compliance into infrastructure-as-code and policy-as-code.
• Transition prototypes to production-grade, secure systems with automated guardrails.
• Promote secure-by-default practices through internal tooling.
• Develop automation tools to convert manual security tasks into self-service capabilities.
• Collaborate with corporate security and governance functions to mature the internal security function.

Requirements

• Minimum of 5 years in security engineering or DevSecOps; 8+ years preferred for senior levels with experience building security functions.
• Strong hands-on cloud security expertise including compute, networking, IAM, key management, and logging.
• Proficiency with infrastructure-as-code tools, especially Terraform and policy-as-code.
• Experience implementing CI/CD security controls such as SAST, SCA, secret scanning, and dependency management.
• Skilled in vulnerability management at scale with automation for sustainable remediation.
• Knowledge of SOC 2 or similar compliance frameworks with practical implementation experience.
• Familiarity with cloud security tooling categories including CSPM, ASPM, compliance automation, and SIEM.
• Strong coding and scripting skills to develop automation pipelines and security tools.
• Experience establishing or advancing in-house security functions.
• Exposure to multi-cloud environments and securing internal developer platforms.
• Expertise in security monitoring, detection, and alerting.
• Experience applying AI/LLM tools to security operations for auto-remediation and evidence generation.

Pay

Total Cash Compensation Range: $130,000 – $225,000 per year

Benefits

• Health insurance coverage including medical, dental, and vision
• Life insurance
• Short and long-term disability insurance
• Flexible spending accounts
• Holiday pay
• 401(k) plan with matching contributions
• Employee assistance program
• Paid parental bonding benefit program
• Flexible paid time off with accrual of 20 days annually, increasing to 25 days after five years