Senior DevSecOps Engineer — Cloud Security & Automation

Bankrate; United States; Hybrid; USD 150,000 - 225,000; Full time

Benefits offered by this job

Health Insurance Coverage

Life Insurance

Short and Long-Term Disability

Flexible Spending Accounts

Holiday Pay

401(k) with match

Employee Assistance Program

Parental Bonding Benefit

Job summary

Bankrate is seeking a DevSecOps Engineer to own security across our engineering lifecycle, embedding security as code, automating evidence, and building guardrails so teams ship fast and safely.

You will lead SOC 2 Type 2 compliance, manage the compliance automation platform, and advance policy-as-code and security automation across multi-cloud environments. Remote or hybrid, EST hours preferred.

Qualifications

• 8+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus.
• Deep hands-on cloud security experience on a major cloud provider.
• Strong infrastructure-as-code skills, especially Terraform, including policy-as-code.
• Proven CI/CD security experience: embedding security into developer workflows.
• Hands-on vulnerability management at scale with automation.
• Working knowledge of SOC 2 and evidence collection in engineering environments.
• Fluency with modern cloud security tooling (CSPM/ASPM, SAST, secret scanning, SIEM).
• Strong coding/scripting ability to build automation and pipelines.
• Experience standing up or maturing an in-house security function.
• Multi-cloud experience securing an internal developer platform.
• Security monitoring and alerting design.
• Experience applying AI/LLM tooling to security operations.

Responsibilities

• Own the engineering side of our compliance program (SOC 2 Type 2).
• Operate our compliance automation platform with integrations and evidence pipelines.
• Productize compliance with policy-as-code and guardrails for faster audits.
• Own cloud security posture management and runtime security tooling.
• Triage and remediate findings with SLA-driven automation.
• Build auto-remediation workflows including AI-assisted pipelines.
• Build and maintain CI/CD security gates (SAST/SCA, secret scanning, SBOM).
• Encode security controls into infrastructure-as-code and policy-as-code.
• Close the prototype-to-production gap with secure-by-default automation.
• Make secure-by-default the norm with internal tooling and auto-applied controls.
• Develop reusable automation modules and AI/agentic tooling for self-service security.
• Partner with security and GRC teams to mature in-house capability.

Skills

Security engineering

Cloud security

Infrastructure as code

CI/CD security

Vulnerability management

SOC 2 familiarity

Cloud tooling

AI/LLM tooling in security

Security automation

Multi-cloud experience

Tools

Wiz

Prisma Cloud

Snyk

Drata

Vanta

Job description

Bankrate is seeking a DevSecOps Engineer to own security across our engineering lifecycle, embedding security as code, automating evidence, and building guardrails so teams ship fast and safely.

You will lead SOC 2 Type 2 compliance, manage the compliance automation platform, and advance policy-as-code and security automation across multi-cloud environments. Remote or hybrid, EST hours preferred.