{"id":132052,"url":"https://alion.io/job/bankrate-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":19124,"name":"Bankrate","domain":"bankrate.com","url":"https://alion.io/company/bankrate","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"SBOM","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-07-14T19:52:07Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-17T07:12:52Z","board_verified":true,"closed_at":null,"days_open":94,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":94},"description":"*This role is open to remote or hybrid candidates (East Coast preference), with hybrid being central to our New York, NY or Charlotte area offices. Must be able to work Eastern Standard Time hours.\nPlatform Engineering builds the foundations our product teams ship on - deployment, infrastructure, and security. We're hiring a DevSecOps Engineer to be the technical owner of our security posture and a force multiplier for every engineer at the company. This is a build-the-function role, not a ticket-taking role. You'll treat security as code, bake it into the development lifecycle, and automate the toil away so teams can ship fast and safely. You'll have unusually broad ownership and unusually high impact.\nWhat You’ll Do:\nOwn the engineering side of our compliance program (SOC 2 Type 2): implementing controls, collecting evidence, and keeping us audit-ready.\nOperate our compliance automation platform - integrations, evidence pipelines, and mapping controls to real implementation.\nProductize compliance: policy-as-code, automated evidence generation, and guardrails so passing audits doesn't slow product delivery.\nOwn cloud security posture management and runtime security tooling: posture monitoring, container and IaC scanning, and runtime coverage across our environment.\nTriage and remediate findings against demanding SLAs, and design the automation and alerting that keeps pace with volume manual effort can't.\nBuild auto-remediation workflows - including AI-assisted pipelines - that detect, file, and (where safe) fix findings with minimal human intervention.\nBuild and maintain CI/CD security gates: SAST/SCA, secret scanning, SBOM generation, dependency management, and container/IaC scanning - implemented as reusable pipeline components and enforced through automated policy.\nEncode security and compliance controls into infrastructure-as-code and policy-as-code so the easy path is the secure path.\nHelp close the prototype-to-production gap: turn fast-moving prototypes into production-grade, secure-by-default systems with automated guardrails.\nMake secure-by-default the norm through our internal tooling, so the right controls are applied automatically rather than relying on engineers to remember.\nBuild the automation the team runs on - reusable modules, pipeline components, and AI/agentic tooling that turn manual security work into self-service capability.\nPartner with corporate security and GRC functions while building and maturing our in-house security capability, so the team can make sound security decisions quickly and independently\nWhat We’re Looking For:\n5+ years in security engineering, DevSecOps, or platform/infrastructure engineering with a strong security focus (Staff level: 8+ years and a track record of building security functions or programs).\nDeep hands-on cloud security experience (compute, networking, IAM, key management, logging) on a major cloud provider.\nStrong infrastructure-as-code skills, especially Terraform, including policy-as-code.\nProven CI/CD security experience: building pipeline security controls (SAST/SCA, secret scanning, dependency and container scanning) into developer workflows.\nHands-on vulnerability management at scale: triage, prioritization, SLA-driven remediation, and the automation to make it sustainable.\nWorking knowledge of SOC 2 (or comparable frameworks) and what it takes to implement and evidence controls in a real engineering environment.\nFluency with the categories of modern cloud security tooling - CSPM, ASPM/SAST and secret scanning, compliance automation, and SIEM (e.g., tools such as Wiz, Prisma Cloud, Snyk, Drata, Vanta, or equivalents).\nStrong coding/scripting ability to build automation, not just configure tools - you write the pipelines, modules, and tooling that scale security across many services.\nExperience standing up or maturing an in-house security function.\nMulti-cloud exposure and experience securing an internal developer platform.\nSecurity monitoring and detection/alerting design.\nExperience applying AI/LLM tooling to security operations - auto-remediation, evidence generation, agentic workflows.\nCompensation:\nTotal Cash Compensation Range: $130,000 - $225,000 per year\nActual compensation varies based on location, experience, and qualifications.\nAdditionally, the following benefits are provided by Red Ventures, subject to eligibility requirements.\nHealth Insurance Coverage (medical, dental, and vision)\nLife Insurance\nShort and Long-Term Disability Insurance\nFlexible Spending Accounts\nHoliday Pay\n401(k) with match\nEmployee Assistance Program\nPaid Parental Bonding Benefit Program\nFlexible Paid Time Off (PTO): We believe time to rest and recharge is essential. That’s why we offer a generous and flexible PTO policy. Full-time employees accrue 20 days of PTO for a full calendar year annually, with an increase to 25 days after five years of service.\nWho We Are:\nBankrate is where Americans go to get the best price on life's most important financial decisions. By combining proprietary data, advanced technology, and deep market coverage, Bankrate helps consumers compare options and make confident financial choices across mortgages, credit cards, savings, and more. As a rate provider to the Federal Reserve and the benchmark relied upon by major publishers and policymakers nationwide, Bankrate's rate data is the national standard. This commitment to precision is reflected across all its products. In mortgages, proprietary auction technology puts lenders in real-time competition on price alone, consistently delivering rates in the lowest 10% in the country. For deposits, the platform features exclusively top-tier rates in the top 10% nationally, while its credit card coverage encompasses more than 90% of the market by volume. Founded by a journalist, Bankrate remains dedicated to its founding mission of transparency, honest information, and real competition - helping to make the American dream more affordable for everyone.\nRed Ventures is an equal opportunity employer that does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or any other basis protected by law. Employment at Red Ventures is based solely on a person's merit and qualifications. \nWe are committed to providing equal employment opportunities to qualified individuals with disabilities. This includes providing reasonable accommodation where appropriate. Should you require a reasonable accommodation to apply or participate in the job application or interview process, please contact . \nIf you are based in California, we encourage you to read this important information for California residents linked here.\nAt Red Ventures, we believe in real human connection. That’s why we do not hire someone through text, social media, or email only. As part of the hiring process, you should expect live conversations with RV teammates before any offer is made. Also, keep an eye on the sender: we only use official @redventures.com email addresses at the portfolio level or business specific email addresses (e.g., @thepointsguy.com), not ones like “redventurescareer.com.” We will never ask candidates to send money, buy equipment, or share financial account info during your journey with us. You can always find our open roles on redventures.com- if you receive a message that seems suspicious, please use redventures.com to verify the opportunity.\nFor more, the U.S. Federal Trade Commission has published helpful articles to help individuals learn more about protecting themselves from recruiter scams. If you think you’ve been targeted, feel free to report it to your local authorities. Stay safe out there!","description_format":"text","description_chars":7853,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Insurance coverage","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Financial Comparison & Loan Marketplaces","Financial News & Media"],"lifecycle":[{"event":"open","at":"2026-07-14T19:52:07Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.643,"p_room":0.36,"age_days":94,"expected_fill_days":52,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":true},"html_url":"https://alion.io/job/bankrate-senior-devsecops-engineer","json_url":"https://alion.io/job/bankrate-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-17T07:28:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10202,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19124},"rest":"https://alion.io/mcp/rest/get_company?id=19124"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbankrate-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbankrate-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbankrate-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bankrate-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbankrate-senior-devsecops-engineer"}]}