Senior DevSecOps Engineer jobs in United States
cer-icon
Apply on Employer Site
company-logo

ClassWallet · 1 day ago

Senior DevSecOps Engineer

ClassWallet is a leading financial technology company in the United States, seeking to hire a Senior DevSecOps Engineer to join their team. This role involves serving as the primary architect of the company's security posture, ensuring the platform remains secure and compliant while collaborating closely with DevOps and Engineering teams.

Financial ServicesFinTech
badNo H1BnoteSecurity Clearance Requirednote

Responsibilities

Own the critical intersection of security and compliance, driving the continuous hardening and evolution of our systems at every layer
Work as a high-impact peer to our DevOps and Engineering teams and collaborate closely with our CISO to align our overarching compliance efforts with deep, architectural implementation
Implement and manage SIEM (Security Information and Event Management) and SOAR platforms
Configure complex alerting, log aggregation, and real-time threat detection to ensure constant visibility
Create and maintain stringent, audit-ready documentation
Manage and remediate findings from external penetration tests and automated vulnerability scanning (SAST/DAST)
Influence DevOps and Engineering teams to adopt a 'Security-First' culture
Implement a true 'Zero Trust' architecture and harden infrastructure baselines
Align SOC2, GovRAMP, and FedRAMP efforts so that the security posture is fully integrated into deployment pipelines and daily operations

Qualification

AWSSOC2 Type 2 complianceSIEM managementApplication SecurityCI/CD securityData SecurityDocumentationIncident ResponseSecurity TestingCollaboration

Required

Minimum of 10 years of experience securing Cloud systems (AWS), specifically within or very near government-level security environments (FedRAMP/GovRAMP/DoD)
Deep, hands-on expertise in SOC2 Type 2 compliance. Familiarity with GovRAMP and FedRAMP frameworks is essential, as you will be responsible for translating these high-level requirements into technical reality
Expertise in implementing and managing SIEM (Security Information and Event Management) and SOAR platforms (e.g., Splunk, Datadog Security, AlienVault, or AWS Security Hub). You should be adept at configuring complex alerting, log aggregation, and real-time threat detection to ensure constant visibility
Expert-level proficiency in hardening AWS environments (IAM, VPC, GuardDuty, KMS, Security Hub, and AWS Config)
Deep understanding of securing Node-based systems and modern web applications
Extensive experience in database security, encryption at rest/transit, and data masking
Deep knowledge of securing CI/CD pipelines and automating security gates within the development lifecycle
Proven ability to create and maintain stringent, audit-ready documentation. You don't just secure the system; you prove it through impeccable record-keeping and process design
Experience managing and remediating findings from external penetration tests and automated vulnerability scanning (SAST/DAST)
Exceptional communication skills, with the ability to influence DevOps and Engineering teams to adopt a 'Security-First' culture

Benefits

Excellent salary and benefits commensurate with experience

Company

ClassWallet

twittertwittertwitter
company-logo
ClassWallet is the leading purchasing and reimbursement platform for public funds.

Funding

Current Stage
Growth Stage
Total Funding
$101.83M
Key Investors
Guidepost Growth EquityRainfall VenturesSinovation Ventures
2023-08-15Private Equity· $95M
2023-03-21Private Equity
2020-05-12Debt Financing· $0.5M

Leadership Team

leader-logo
Stephen Lindeman
Chief Executive Officer
linkedin
leader-logo
Jamie Rosenberg
Founder & Executive Chairman
linkedin
Company data provided by crunchbase