Staff Software Engineer - DevSecOps - AWS/Azure - Terraform/Ansible - CI/CD Pipelines
Job Summary
Job Description
We are seeking an experienced DevSecOps professional to lead and support enterprise security, compliance, and risk management initiatives. This role involves designing, implementing, and maintaining controls aligned with global compliance frameworks such as ISO 27001, SOC 2, and NIST 800-53. The ideal candidate will possess a deep understanding of security engineering principles, a strong compliance mindset, and a proven ability to drive cross-functional security programs. Key responsibilities include implementing and maintaining security controls, collaborating with auditors, developing automated monitoring tools, translating regulatory requirements into technical specifications, and performing gap assessments and risk analysis. A strong understanding of Kubernetes security, including RBAC, pod security policies, network policies, and secrets management, is also required.
Must have:
- 8+ years in information security/compliance engineering
- DevOps security practices, CI/CD integration
- ISO 27001, SOC 2, NIST SP 800-53 experience
- Cloud-native environments (AWS, Azure, GCP)
- Infrastructure-as-code (Terraform, Ansible)
- Access management, encryption, network security
- Lead technical initiatives, work cross-functionally
- Excellent written and verbal communication
Good to have:
- CISSP, CISA, CISM, ISO 27001 certifications
- Compliance automation platforms experience
- Experience in regulated industries
15 skills required
Job Details
Job Description:
Experience: 9-14 Years
DevSecOps to lead and support our enterprise security, compliance, and risk management initiatives. This individual will play a key role in designing, implementing, and maintaining controls aligned with global compliance frameworks including ISO 27001, SOC 2, and NIST 800-53. The ideal candidate has a deep understanding of security engineering principles, a strong compliance mindset, and a proven track record in driving cross-functional security programs.
Key Responsibilities:
• Follow established processes for the implementation and maintenance of security controls aligned with ISO 27001, SOC 2, and NIST 800-53.
• Collaborate with security leadership to ensure adherence to ISO 27001, SOC 2, and NIST 800-53 controls and procedures.
• Collaborate with internal and external auditors to support audits, evidence gathering, and remediation efforts.
• Develop and maintain automated security and compliance monitoring tools and dashboards.
• Translate regulatory requirements into technical requirements and integrate them into the SDLC (Secure Development Lifecycle).
• Execute tasks related to the implementation and upkeep of compliance controls under ISO 27001, SOC 2, and NIST 800-53 guidance.
• Conduct gap assessments and risk analysis; define and track remediation efforts to ensure compliance readiness.
• Strong hands-on experience and understanding of Kubernetes security, including RBAC, pod security policies, network policies, and secrets management.
Required Qualifications:
• 8+ years of experience in information security or compliance engineering roles.
• Practical experience with DevOps security practices, including integrating security controls into CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, etc.)
• Strong understanding and hands-on experience with ISO 27001, SOC 2 (Type I and II), and NIST SP 800-53.
• Experience working in cloud-native environments (AWS, Azure, or GCP) with secure configuration and governance controls.
• Familiarity with cloud-native security (AWS, GCP, or Azure), container orchestration, and infrastructure-as-code tools like Terraform, Helm, or Ansible.
• Solid knowledge of access management, encryption, logging/monitoring, and network security principles.
• Demonstrated ability to lead technical initiatives, work cross-functionally, and influence at all levels.
• Excellent written and verbal communication skills with experience writing policies and technical documentation.
Preferred Qualifications:
• Professional certifications such as CISSP, CISA, CISM, ISO 27001 Lead Implementer/Auditor, or AWS Security Specialty etc.
• Experience with compliance automation platforms.
• Background in regulated industries such as fintech, healthcare, or government.
Similar Jobs
.png%3F1725396992&w=256&q=50)
Harvey
San Francisco, California, United States (On-Site)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
![Sourcegraph Inc - Security Engineer [IC3]](/_next/image?url=https%3A%2F%2Foutscal-lms-data.s3.ap-south-1.amazonaws.com%2Fcompany-image%2Fproduction%2Fsourcegraph%2Fsourcegraph_logo_10_16_2024__09_22_23.jpg&w=256&q=50){kind=logo}
Internet Brands
El Segundo, California, United States (On-Site)
• 1 Month ago
PayPal
San Jose, California, United States (Hybrid)
• 2 Months ago
Highspot
Vancouver, British Columbia, Canada (Hybrid)
• 1 Month ago
Get notifed when new similar jobs are uploaded
Jobs in Bengaluru, Karnataka, India
PwC
Hyderabad, Telangana, India (On-Site)
• 1 Month ago
Cubic corporation
Hyderabad, Telangana, India (Hybrid)
• 3 Months ago
Get notifed when new similar jobs are uploaded
Devops Jobs
Apple
Cupertino, California, United States (On-Site)
• 3 Months ago
bytedance
San Jose, California, United States (On-Site)
• 8 Months ago
Veeam Software
Seattle, Washington, United States (Remote)
• 1 Month ago
GoTo Group
Gurugram, Haryana, India (On-Site)
• 10 Months ago
Get notifed when new similar jobs are uploaded
