Secure Site Reliability Engineer

You will ensure security controls execute reliably across CI/CD and cloud delivery workflows. You will integrate security scans, enforce policy-as-code gates, monitor control health, maintain security metrics and evidence, collaborate on deployment security, support control-failure investigations, and maintain runbooks and operational workflows.

Responsibilities

• Integrate and maintain automated security controls in CI/CD pipelines
• Enforce security gates and policy-as-code validations across delivery stages
• Ensure security checks are not skipped or bypassed
• Monitor security control execution and detect failures or misconfigurations
• Maintain dashboards and metrics for security control execution
• Collaborate with AppSec to ensure security scans execute correctly
• Collaborate with CloudSec to enforce cloud security policies during deployments
• Support investigations of control failures or pipeline bypasses
• Maintain automated security evidence for audit purposes
• Develop and maintain SSRE runbooks, control definitions, and operational workflows

Requirements

• Three or more years of experience in DevSecOps, security engineering, or CI/CD automation
• Experience with Azure DevOps, GitHub Actions, or Jenkins
• Experience integrating security scanning tools into pipelines
• Knowledge of Terraform, Bicep, or ARM validation
• Experience with Python, PowerShell, or Bash scripting and automation
• Understanding of cloud-native security concepts and delivery pipelines
• Familiarity with ISO 27001 and SOC 2

Benefits

• Hybrid work schedule with 3 days on-site and 2 days remote