Staff DevSecOps Engineer — Secure-by-Default Platform

Bankrate; United States; Hybrid; USD 150,000 - 225,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Disability Insurance

401(k) with match

Flexible PTO

Job summary

Bankrate is seeking a senior DevSecOps Engineer to own our security posture across cloud and CI/CD. You will implement policy-as-code, automate evidence generation, and drive secure-by-default development. The role emphasizes automation, AI-assisted remediation, and scalable security across multi-cloud environments.

You will work on integration of SAST/SCA, secret scanning, and SBOM generation, with a focus on reducing toil and accelerating product delivery while maintaining audit readiness.

Qualifications

• 5+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus.
• Deep hands-on cloud security experience on a major cloud provider.
• Strong infrastructure-as-code skills, especially Terraform, including policy-as-code.
• Proven CI/CD security experience: building pipeline security controls into developer workflows.
• Hands-on vulnerability management at scale with automation.
• Working knowledge of SOC 2 and evidence controls in engineering environments.
• Fluency with modern cloud security tooling (CSPM, SAST, secret scanning, compliance automation, SIEM).
• Strong coding/scripting ability to build automation and tooling at scale.
• Experience standing up or maturing an in-house security function.
• Multi-cloud exposure and securing an internal developer platform.
• Security monitoring and detection/alerting design.
• Experience applying AI/LLM tooling to security operations.

Responsibilities

• Own the engineering side of our compliance program (SOC 2 Type 2).
• Operate our compliance automation platform with integrations and evidence pipelines.
• Productize compliance through policy-as-code and automated evidence generation.
• Own cloud security posture management and runtime security tooling.
• Triage and remediate findings against SLAs with automation.
• Build auto-remediation workflows including AI-assisted pipelines.
• Build and maintain CI/CD security gates (SAST/SCA, secret scanning, SBOM).
• Encode security controls into infrastructure- and policy-as-code.
• Help close prototype-to-production gap with secure-by-default systems.
• Make secure-by-default the norm through internal tooling to automate controls.
• Build reusable modules and AI-driven tooling for security automation.
• Partner with corporate security and GRC functions to mature in-house security.

Skills

Security engineering

DevSecOps

Automation

AI/LLM in security

Vulnerability management

SOC 2 knowledge

Cloud security

Scripting/coding

Tools

Terraform

SAST/SCA

Secret scanning

SBOM generation

Prisma Cloud

Wiz

Snyk

Drata

Vanta

Job description

Bankrate is seeking a senior DevSecOps Engineer to own our security posture across cloud and CI/CD. You will implement policy-as-code, automate evidence generation, and drive secure-by-default development. The role emphasizes automation, AI-assisted remediation, and scalable security across multi-cloud environments.

You will work on integration of SAST/SCA, secret scanning, and SBOM generation, with a focus on reducing toil and accelerating product delivery while maintaining audit readiness.