About the role
Requirements:
- Bachelor's degree in computer science, engineering, or a related technical field, or equivalent practical experience.
- 10+ years of experience in DevSecOps, Infrastructure Security, or Security Engineering roles.
- 3+ years directly managing engineers, including hiring, performance management, and career development. Prior experience as a senior individual contributor before moving into management.
- Strong working knowledge of cloud infrastructure (AWS, GCP, or Azure), container platforms (Docker, Kubernetes), and modern CI/CD toolchains such as Jenkins, Tekton, GitHub Actions, and ArgoCD; enough to lead technical discussions credibly.
- Solid understanding of secure infrastructure design, identity and access management, network security, and infrastructure-as-code practices.
- Demonstrated experience owning a security or infrastructure program with measurable outcomes; vulnerability SLAs, control automation, audit readiness, or incident-response maturity.
- Experience running incident response and blameless post-mortem practice for production systems.
- Excellent written and verbal communication; able to brief engineering leadership and translate technical risk into business terms.
Preferred:
- Experience managing a DevSecOps, cloud security engineering, or platform security team specifically.
- Hands-on experience taking an organization through SOC 2, ISO 27001, or PCI-DSS certification or audit.
- Experience in a multi-tenant SaaS environment handling regulated consumer or financial data.
- Familiarity with policy-as-code (OPA, Kyverno), secrets management (Vault, KMS), and software supply chain security (SBOM, artifact signing).
- Experience building a team from a small base, defining processes, and operating a cadence where little existed.
- Exposure to securing AI/ML workloads and agentic systems.
- Relevant certifications such as CISSP, CCSP, CKS, or AWS Certified Security - Specialty.