Senior DevSecOps Engineer - Remote, Build Security at Scale

Bankrate; United States; Hybrid; USD 150,000 - 225,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

FSAs

Holiday Pay

401(k) Match

Employee Assistance Program

Parental Bonding

Flexible PTO

Job summary

Bankrate is seeking a DevSecOps Engineer to own security across our platform, bake security into the development lifecycle, and automate toil away so teams can ship fast and safely.

This is a build-the-function role with broad ownership and high impact. You will manage SOC 2 controls, CI/CD security gates, and multi-cloud tooling, enabling auto-remediation and policy-as-code. Remote or hybrid candidates are welcome, with East Coast preference and EST hours.

Qualifications

• 8+ years in security engineering with a track record of building security functions or programs.
• Deep hands-on cloud security experience on a major cloud provider.
• Strong infrastructure-as-code skills, especially Terraform, including policy-as-code.
• Proven CI/CD security experience: building pipeline security controls into developer workflows.
• Hands-on vulnerability management at scale: triage, prioritization, SLA-driven remediation, and automation.
• Working knowledge of SOC2 (or comparable frameworks) and evidencing controls in an engineering environment.
• Experience applying AI/LLM tooling to security operations - auto-remediation and evidence generation.

Responsibilities

• Own the engineering side of our SOC 2 Type 2 compliance program.
• Operate our compliance automation platform - integrations, evidence pipelines, and mapping controls to real implementation.
• Productize compliance: policy-as-code, automated evidence generation, and guardrails for faster audits.
• Own cloud security posture management and runtime security tooling across our environment.
• Triage and remediate findings with SLA-driven processes and automation.

Skills

Cloud security

CI/CD security

Vulnerability management

SOC2 familiarity

Automation / AI remediation

Policy as code

Multi-cloud security

Incident response

Scripting / coding

Tools

Terraform

Wiz

Prisma Cloud

Snyk

Drata

Vanta

Job description

Bankrate is seeking a DevSecOps Engineer to own security across our platform, bake security into the development lifecycle, and automate toil away so teams can ship fast and safely.

This is a build-the-function role with broad ownership and high impact. You will manage SOC 2 controls, CI/CD security gates, and multi-cloud tooling, enabling auto-remediation and policy-as-code. Remote or hybrid candidates are welcome, with East Coast preference and EST hours.