DevSecOps Engineer - Automate Compliance & Cloud Security

Red Ventures; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid Schedule

Flexible PTO

Mentorship Culture

Purpose & Community

World-Class Wellness

Job summary

Red Ventures is seeking a Senior Security Engineer to own the engineering side of our SOC 2 Type 2 compliance program and drive security across our developer platforms. You will design and implement automation for evidence collection, CI/CD security gates, and AI-assisted remediation, shaping secure-by-default infrastructure and protecting multi-cloud environments.

Hybrid work arrangement with strong emphasis on security governance, automation, and collaboration with product and platform teams

Qualifications

• 5+ years in security engineering, DevSecOps, or platform engineering with a security focus.
• Staff level: 8+ years with a track record of building security functions or programs.
• Deep hands-on cloud security experience across major cloud providers.

Responsibilities

• Own the engineering side of our SOC 2 Type 2 compliance program: controls, evidence, audit readiness.
• Operate our compliance automation platform: integrations, evidence pipelines, mapping controls to implementation.
• Productize compliance: policy-as-code, automated evidence generation, and guardrails.
• Own cloud security posture management and runtime security tooling across our environment.
• Triage and remediate findings with SLA-driven automation and AI-assisted remediation.

Skills

Cloud security

Automation coding

Multi-cloud security

Terraform / IaC

Security monitoring

Tools

CSPM

ASPM/SAST

Secret scanning

SBOM generation

Drata / Vanta / Snyk

Terraform

Job description

Red Ventures is seeking a Senior Security Engineer to own the engineering side of our SOC 2 Type 2 compliance program and drive security across our developer platforms. You will design and implement automation for evidence collection, CI/CD security gates, and AI-assisted remediation, shaping secure-by-default infrastructure and protecting multi-cloud environments.

Hybrid work arrangement with strong emphasis on security governance, automation, and collaboration with product and platform teams