Senior DevSecOps Engineer - Security & Compliance Lead

Supio; San Francisco (CA); On-site; USD 180,000 - 220,000; Full time

Job summary

Supio seeks a senior infrastructure engineer to own security and compliance across production infrastructure. You'll lead SOC 2, HIPAA, and GDPR programs, and work within DevOps on a Cloud, Kubernetes, and Terraform platform with CI/CD and observability.

The role requires hands-on security and scale experience in a fast-growing startup. Responsibilities include enabling least-privilege access, remediation of CVEs, and translating security findings into actionable guidance for engineers.

Qualifications

• 5+ years in infrastructure, platform, or SRE with security ownership
• Hands-on AWS, Kubernetes, and Terraform
• Able to write and ship production code
• Experience leading SOC 2, HIPAA, GDPR audits
• Strong IAM and access-control design

Responsibilities

• Own Infrastructure Compliance: SOC 2, HIPAA, GDPR programs and automate evidence collection, remediation, and monitoring
• Build and Run Infrastructure: Manage Cloud, Kubernetes, Terraform platform including CI/CD and observability
• Write Production Code: Develop tooling and automation
• Own Access Control: Design and maintain IAM across cloud, source control, and tooling
• Remediate Vulnerabilities: Identify and fix CVEs with eng teams to prevent incidents

Skills

Infra Experience

AWS

Kubernetes

Terraform

IAM / Access Mgmt

Production Code

CVEs remediation

Security & Compliance

Communication

Education

Bachelor's in CS

Tools

Vanta

SAST/SCA

Job description

Supio seeks a senior infrastructure engineer to own security and compliance across production infrastructure. You'll lead SOC 2, HIPAA, and GDPR programs, and work within DevOps on a Cloud, Kubernetes, and Terraform platform with CI/CD and observability.

The role requires hands-on security and scale experience in a fast-growing startup. Responsibilities include enabling least-privilege access, remediation of CVEs, and translating security findings into actionable guidance for engineers.