DevSecOps Lead

We are looking for a Security Engineer who will serve as the critical bridge between our platform engineering teams and the Chief Security Officer (CSO) organization. In this role, you will develop a deep understanding of our platform architecture and act as the authoritative voice on how our systems meet—or must evolve to meet— our security requirements. You will translate complex security mandates into actionable engineering guidance, and bring platform realities back to the CSO team to inform policy and strategy.

KEY RESPONSIBILITIES
Platform Security Assessment
- Develop a thorough understanding of our platform architecture, including infrastructure, services, data flows, and integrations.
- Evaluate how current platform designs meet defined security requirements and identify gaps or areas of risk.
- Produce clear, evidence-based assessments of the security posture across platforms, with prioritized remediation recommendations.

Liaison & Cross-Functional Collaboration
- Act as the primary liaison between platform engineering teams and the CSO organization, with support from senior leadership.
- Translate security policies and requirements from the CSO team into practical guidance that platform engineers can act on.
- Represent platform constraints, timelines, and technical realities back to the CSO team to facilitate informed decision-making.
- Facilitate regular touchpoints between teams to maintain alignment on security priorities, roadmaps, and incident response.

Security Program Support
- Partner with platform teams during design reviews, architecture discussions, and new feature development to embed security from the start.
- Track and report on remediation efforts for identified security gaps and ensure timely resolution.
- Assist in developing security standards, guidelines, and documentation relevant to platform environments.
- Support audits, compliance reviews, and risk assessments as required.

MUST HAVE
- 3–6 years of experience in security engineering, platform security, or a closely related discipline.
- Strong understanding of platform and cloud architecture (e.g., AWS, GCP, or Azure), including networking, IAM, and containerized environments.
- Demonstrated ability to assess systems against security frameworks (e.g., NIST, CIS, SOC 2, ISO 27001) and identify control gaps.
- Excellent communication skills with the ability to translate technical findings for both engineering and executive audiences.
- Experience working cross-functionally across engineering, security, and leadership teams.

NICE TO HAVE
- Relevant certifications such as CISSP, CISM, AWS Security Specialty, or equivalent.
- Experience in a liaison or embedded security role within a product or platform engineering organization.
- Familiarity with DevSecOps practices, CI/CD security integration, and infrastructure-as-code security review.
- Prior exposure to working with or within a CSO or CISO function.