About this role

Bankrate is seeking a Senior DevSecOps Engineer to own the security posture and act as a force multiplier for engineers. This role focuses on treating security as code, integrating it into the development lifecycle, and automating processes to ensure fast and safe product delivery. You will have broad ownership and significant impact in building out the security function.

What we are looking for

6

Own engineering side of compliance program (SOC 2 Type 2)
Productize compliance with policy-as-code and automated evidence generation
Manage cloud security posture and runtime security tooling
Build auto-remediation workflows, including AI-assisted pipelines
Develop CI/CD security gates (SAST/SCA, secret scanning, SBOM)
Encode security and compliance into infrastructure-as-code

Skills mentioned

1

Terraform