Senior DevSecOps Engineer - Cloud Security & Compliance

Bonfirevc; San Francisco (CA); Ibrido; USD 180.000 - 220.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health, Dental, Vision, and Life

401(k)

Flexible Time Off

Remote work day every Tuesday

DoorDash subsidies

Boba Wednesdays

Commuter subsidies

Team gatherings and offsites

Descrizione del lavoro

Supio, a Seattle-based AI platform for law firms, seeks a Senior DevSecOps Engineer to own security, compliance, and production infrastructure in a hybrid Seattle/San Francisco setting.

You will work on SOC 2, HIPAA, GDPR, AWS, Kubernetes, Terraform, and CI/CD, writing production code and improving tooling while ensuring least privilege access and rapid vulnerability remediation. This is a high-autonomy role in a fast-growing startup.

Competenze

• 5+ years in infrastructure, platform, or SRE with security and compliance ownership.
• Strong hands-on experience with AWS, Kubernetes, and Terraform.
• Ability to write and ship production code.
• Hands-on experience leading SOC 2, HIPAA, and GDPR audits.
• Experience designing IAM and access controls in cloud environments.

Mansioni

• Own Infrastructure Compliance: scale SOC 2, HIPAA, and GDPR programs with automated evidence collection, remediations, and continuous control monitoring.
• Build and Run Infrastructure: work as a full member of the DevOps team on Cloud, Kubernetes, and Terraform platform, including CI/CD and observability.
• Write Production Code: build tooling and automation with real software engineering scope.
• Own Access Control: design and maintain IAM across cloud, source control, and internal tooling, including least privilege and auditability.
• Remediate Vulnerabilities: identify and remediate CVEs across infrastructure and application code.

Conoscenze

SRE engineering

Security ownership

Problem solving

Communication

Formazione

Bachelor's degree in Computer Science or related field

Strumenti

AWS

Kubernetes

Terraform

IAM

CI/CD

Descrizione del lavoro

Supio, a Seattle-based AI platform for law firms, seeks a Senior DevSecOps Engineer to own security, compliance, and production infrastructure in a hybrid Seattle/San Francisco setting.

You will work on SOC 2, HIPAA, GDPR, AWS, Kubernetes, Terraform, and CI/CD, writing production code and improving tooling while ensuring least privilege access and rapid vulnerability remediation. This is a high-autonomy role in a fast-growing startup.