(Sr.) DevSecOps / SecOps Engineer

About Us

Securiti is the pioneer of the Data Command Center, a centralized platform that enables the safe use of data and GenAI. It provides unified data intelligence, controls and orchestration across hybrid multicloud environments. Large global enterprises rely on Securiti's Data Command Center for data security, privacy, governance, and compliance. Securiti has been recognized with numerous industry and analyst awards, including;

- Most Innovative Startup by RSA
- Top 25 Machine Learning Startups by Forbes
- Most Innovative AI Companies by CB Insights
- Cool Vendor in Data Security by Gartner
- Privacy Management Wave Leader by Forrester

Job Overview

As a DevSecOps Engineer at Securiti, you will play a crucial role in ensuring the security and stability of our SaaS Platform. You will collaborate closely with development, operations, and compliance teams to integrate security practices into our DevOps pipeline.  You will play a pivotal role in monitoring, analyzing, and responding to security incidents, as well as working collaboratively with cross-functional teams to enhance the overall security posture of our organization. 

Responsibilities

• Integrate security practices into the DevOps pipeline, including vulnerability scanning, penetration testing, and security code reviews

• Implement real-time threat monitoring solutions

• Develop secure automation scripts and tools

• Conduct security audits and compliance checks

• Participate in incident response and plan development

• Promote security awareness and provide guidance

• Evaluate and recommend security tools

• Maintain security documentation

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience)

• Proven experience in SecOps/DevOps with strong security focus

• Familiarity with security standards and frameworks (e.g., OWASP, CIS, NIST)

• Proficiency in security tools and technologies (SIEM, IDS/IPS, antivirus, and endpoint security solutions)

• Knowledge of cloud platforms (e.g., AWS, Azure, GCP) and cloud security best practices

• Experience with SOC2 and FedRAMP reporting engagements, and Security, Availability, Confidentiality, Privacy, and Processing Integrity Trust Service Principles

• Hands-on experience with DevOps tools (Jenkins, Docker, Kubernetes, Terraform, etc.)

• Strong understanding of networking, firewalls, and intrusion detection systems

• Relevant security certifications (e.g., CISSP, Certified Ethical Hacker) is a plus

• Experience with monitoring tools (Prometheus, Grafana, etc.)

• Good knowledge of Linux and Bash scripting 

• Very strong diagnostic and troubleshooting skills

• Enthusiastic, good communicator,  teamwork-oriented, and eager to learn new tech