About this role

Bankrate is seeking a Senior DevSecOps Engineer to own the company's security posture and enhance engineering efficiency. This role involves building security into the development lifecycle through automation, policy-as-code, and compliance tooling. You will be instrumental in ensuring security and compliance across cloud environments and CI/CD pipelines, with a focus on reducing manual effort and enabling faster, safer product delivery.

What we are looking for

6

Own engineering side of SOC 2 Type 2 compliance program
Productize compliance with policy-as-code and automated evidence generation
Manage cloud security posture and runtime security tooling
Build auto-remediation workflows, including AI-assisted pipelines
Implement CI/CD security gates (SAST/SCA, secret scanning, SBOM)
Encode security and compliance into infrastructure-as-code

Skills mentioned

1

Terraform