{"id":868186,"url":"https://alion.io/job/greenboard-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":676376,"name":"Greenboard","domain":"greenboard.com","url":"https://alion.io/company/greenboard","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":165000,"max":230000,"currency":"USD","period":"year","gross":null,"usd_annual":230000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-17T18:51:59Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-31T06:16:55Z","board_verified":true,"closed_at":null,"days_open":74,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":74},"description":"About Greenboard\nAt Greenboard, we’re building the future of financial compliance. Greenboard is the unified, AI-native compliance operating system for RIAs, fintechs, private funds, hedge funds, and more. It replaces the fragmented mix of legacy tools and automates more than previously possible. By centralizing data and workflows, Greenboard helps firms reduce regulatory risk, simplify their technology stack, modernize how they run compliance, and save money.\nOur founding team includes engineers who have scaled products at Amazon, Google, and multiple unicorn startups. We’re backed by Y Combinator, General Catalyst, Base10, and other top-tier investors, and have raised over $20M to date. Brand-name financial institutions already rely on Greenboard - and we’re growing fast.\nAbout the Role\nWe're looking for a hands-on security engineer to own and scale our security posture as we grow. You'll be the first dedicated security hire on our engineering team, which means you'll have a direct hand in shaping how we think about security - from compliance frameworks and vendor diligence to infrastructure hardening and secure development practices.\nThis is a high-impact, high-autonomy role. You'll work closely with engineering, product, and business teams to make sure we're building securely, meeting the compliance bar our fintech customers expect, and staying ahead of threats as we expand internationally.\nWhat You'll Do\nTechnical Security\nDetect, triage, and drive remediation of vulnerabilities across the stack - infrastructure, application, and network.\n\nManage third-party penetration tests and coordinate internal response to findings.\n\nIntegrate security into the development lifecycle: code review guardrails, SAST/DAST tooling, dependency scanning, and developer security guidance.\n\nOwn credential and secrets management, including rotation policies, vault configuration, and access controls.\n\nManage infrastructure patching and hardening, working with engineering to keep systems current without disrupting delivery.\n\nSecurity Compliance & Frameworks\nOwn our SOC 2 compliance program end-to-end, including audit preparation, evidence collection, and remediation tracking.\n\nMaintain and mature our GDPR compliance posture, partnering with legal and product to ensure data protection requirements are met.\n\nLead our ISO 42001 certification efforts, establishing and maintaining the required AI management system controls.\n\nResearch and implement additional compliance frameworks as we expand into new markets, acting as the internal authority on what's required and when.\n\nVendor & Customer Security Diligence\nManage inbound security diligence requests that arise during client sales processes - completing questionnaires, coordinating evidence, and joining calls as needed.\n\nBuild and maintain a vendor security review process for evaluating third-party tools and services before they're adopted.\n\nMaintain a library of up-to-date security documentation (policies, SOC 2 reports, architecture diagrams) to accelerate deal cycles.\n\nIT & Device Security\nManage endpoint security across the company - MDM, disk encryption, OS patching, and device compliance policies.\n\nMaintain and enforce access control policies for corporate tools and systems (SSO, MFA, least-privilege access).\n\nWhat We're Looking For\n5-10 years of experience in security engineering, application security, or infrastructure security roles.\n\nHands-on experience with SOC 2 audits and at least one other compliance framework (GDPR, ISO 27001, PCI-DSS, or similar).\n\nStrong technical foundation - you're comfortable reading code, reviewing AWS infrastructure, and working in a CI/CD environment.\n\nExperience with vulnerability management tooling (e.g., Snyk, Semgrep, Qualys, Burp Suite, or equivalents).\n\nFamiliarity with AWS Secrets Manager and IAM best practices.\n\nExperience managing or coordinating third-party pentests.\n\nClear, low-ego communication style - you can explain a risk to an engineer and a compliance requirement to a salesperson with equal clarity.\n\nComfort with ambiguity and ownership. This is a build-it role, not a maintain-it role.\n\nNice to Have\nPrior experience at a fintech or other regulated-industry startup.\n\nFamiliarity with ISO 42001 or AI governance frameworks.\n\nExperience with MDM platforms\n\nBackground supporting international expansion from a security/compliance perspective.\n\nBenefits\nSalary range: $165,000-$240,000 + meaningful equity\n\n401(k) with 5% company match\n\nMedical, dental, and vision coverage\n\n15 days PTO + 11 company holidays + flexible sick time\n\n2 additional PTO days for each year of service (up to 10 additional days)\n\n10 remote days per year plus additional around the holidays\n\nBi-annual off-sites and team retreats\n\nFront-row seat to building the operating backbone of modern finance","description_format":"text","description_chars":4828,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-09-13T14:56:57Z"},{"event":"close","at":"2026-09-24T21:25:31Z"},{"event":"reopen","at":"2026-10-26T21:12:22Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.524,"p_room":0.28,"age_days":74,"expected_fill_days":36,"reasons":["conf:3","win:tail","crowd:"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":230000,"is_top_pay":true},"html_url":"https://alion.io/job/greenboard-senior-devsecops-engineer","json_url":"https://alion.io/job/greenboard-senior-devsecops-engineer.json","meta":{"generated_at":"2026-10-31T06:28:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9535,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":676376},"rest":"https://alion.io/mcp/rest/get_company?id=676376"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgreenboard-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgreenboard-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgreenboard-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/greenboard-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgreenboard-senior-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":868186}},{"tool":"search_jobs","arguments":{"company":"greenboard.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":868186},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}