Senior DevSecOps Engineer: Secure by Design and Automate

Bankrate; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

Bankrate is seeking a DevSecOps Engineer to own security posture across our platforms. This hybrid/remote role favors East Coast candidates and requires EST hours; you’ll work from New York, NY or Charlotte area offices when on-site.

You will automate security into the development lifecycle, build policy-as-code, and enable fast, secure software delivery with broad ownership and high impact. Collaborate with engineering, product, and security teams to balance speed and risk while documenting

Responsibilities

• Own the SOC 2 Type 2 compliance program: controls, evidence, audit readiness.
• Run our compliance automation platform: integrations, evidence pipelines, control mapping.
• Productize compliance: policy-as-code, automated evidence, guardrails for audits.
• Own cloud security posture and runtime tooling: posture monitoring and scanning.
• Triage findings with SLAs; design automation and alerting for volume.
• Build auto-remediation workflows with AI-assisted pipelines.
• Build and maintain CI/CD security gates: SAST/SCA, secret scanning, SBOM, dependencies, container/IaC scans.
• Encode security controls into infrastructure-as-code and policy-as-code.
• Help move prototypes to production securely and quickly.

Job description

Bankrate is seeking a DevSecOps Engineer to own security posture across our platforms. This hybrid/remote role favors East Coast candidates and requires EST hours; you’ll work from New York, NY or Charlotte area offices when on-site.

You will automate security into the development lifecycle, build policy-as-code, and enable fast, secure software delivery with broad ownership and high impact. Collaborate with engineering, product, and security teams to balance speed and risk while documenting