Senior DevSecOps Engineer

present of AI; New York (NY); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

AWS IAM hardening

CI/CD security tooling

Explaining risk to non-experts

Job summary

Greenboard is hiring its first dedicated security leader in New York City. You will own vulnerability discovery and remediation, embed security checks into the software delivery process, manage secrets and access, and run our compliance programs from audit preparation to evidence tracking.

A strong candidate has hands-on SOC 2 audit experience plus another framework, can read code and review AWS setups, and can explain risk clearly to engineers and salespeople.

Qualifications

• Hands-on SOC 2 audit experience plus another framework.
• Comfort reading code and reviewing AWS setups.
• Ability to explain risk to engineers and salespeople.

Responsibilities

• Find and fix security vulnerabilities.
• Build security checks into the code shipping process.
• Manage secrets and access controls.
• Run compliance programs from audit prep to evidence tracking.

Skills

SOC 2 audit

Code reading

AWS experience

Risk communication

Security concepts

Tools

AWS IAM

CI/CD tooling

Job description

Engineering · New York City · FullTime · Senior level

This is the first dedicated security hire, so the job covers a wide range: finding and fixing vulnerabilities, building security checks into how code is shipped, managing secrets and access, and running the company's compliance programs from audit prep to evidence tracking. A strong candidate has hands-on audit experience with SOC 2 and at least one other framework, is comfortable reading code and reviewing AWS setups, and can explain risk plainly to both engineers and salespeople. Comfort with building things from scratch matters more than maintaining an existing setup.

How it fits the AI era

AI tools can speed up parts of this work, such as scanning code, sorting findings, and filling out customer security questionnaires, which frees time for harder judgment calls. The role also touches AI directly, since it includes leading a certification for managing AI systems responsibly at a company whose product is AI-native. What stays human is deciding which risks matter, earning trust with customers and auditors, and getting engineers to adopt good practices.

How it builds AI experience

The clearest AI exposure here is leading an ISO 42001 effort, which means setting up the controls that govern how an AI product is built and monitored for regulated financial clients. Someone without that background can prepare by reading the standard, studying common AI risks like data leakage and unreliable outputs, and practicing how they apply to a compliance product that handles sensitive communications records.

Worth showing

• AWS and IAM hardening
• CI/CD security tooling
• Explaining risk to non-experts

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About Greenboard

Unified compliance operating system automating communications archiving and audit readiness for financial firms, per the company.