Senior DevSecOps Engineer - Secure Platform & Automation

Red Ventures; United States; Hybrid; USD 130,000 - 225,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

401(k) with match

Paid Parental Bonding Benefit Program

Flexible PTO 20–25 days/year

Job summary

Red Ventures is seeking a DevSecOps Engineer to own security posture, automate toil away, and embed security into the development lifecycle. You’ll drive compliance, run automation platforms, and build secure-by-default pipelines across multi-cloud environments.

You’ll lead auto-remediation, CI/CD security gates, and security tooling, turning prototypes into production-grade, secure systems with minimal human intervention.

Qualifications

• 5+ years in security engineering, DevSecOps, or platform/infrastructure with security focus.
• Deep hands-on cloud security experience on a major cloud provider.
• Strong infrastructure-as-code skills with policy-as-code.

Responsibilities

• Own the engineering side of our compliance program (SOC 2 Type 2), collecting evidence and staying audit-ready.
• Operate our compliance automation platform with integrations and evidence pipelines.
• Productize compliance with policy-as-code and guardrails to avoid slowing delivery.
• Own cloud security posture management and runtime security tooling across our environment.
• Triage findings against SLAs and design automation to reduce manual toil.
• Build auto-remediation workflows, including AI-assisted pipelines, to fix findings safely.
• Maintain CI/CD security gates (SAST/SCA, secret scanning, SBOM) as reusable components.
• Encode security into infrastructure-as-code and policy-as-code for secure defaults.
• Help close the prototype-to-production gap with automated guardrails.
• Make secure-by-default the norm with internal tooling.

Skills

Security engineering

DevSecOps

Cloud security

Infrastructure-as-code

CI/CD security

Vulnerability management

SOC 2

AI/LLM tooling

Automation

Multi-cloud

Tools

Terraform

Job description

Red Ventures is seeking a DevSecOps Engineer to own security posture, automate toil away, and embed security into the development lifecycle. You’ll drive compliance, run automation platforms, and build secure-by-default pipelines across multi-cloud environments.

You’ll lead auto-remediation, CI/CD security gates, and security tooling, turning prototypes into production-grade, secure systems with minimal human intervention.