Secure Site Reliability Engineer
About The Position
The Security Site Reliability Engineer (SSRE) works within the SecOps domain and reports to the Information Security Officer (ISO). The role ensures the reliability, consistency, and continuous execution of security controls across CI/CD pipelines and cloud delivery workflows. It focuses on automating security controls, enforcing policy-as-code, and ensuring security validations execute as designed throughout the delivery lifecycle. The role owns how security controls are executed and enforced, rather than application security testing, cloud configuration ownership, or service uptime. The position is hybrid, with three days on-site and two days remote. Zenus is headquartered in San Juan, Puerto Rico and operates in more than 150 countries. The company describes its team as diverse and inclusive and is a signatory to the UN’s Principles for Responsible Banking.
Requirements
- At least 3 years of experience in DevSecOps, security engineering, or CI/CD automation roles.
- Strong hands-on experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or Jenkins.
- Experience integrating security scanning tools into pipelines.
- Knowledge of Infrastructure as Code, such as Terraform, Bicep, or ARM, from a validation perspective.
- Experience with scripting and automation using Python, PowerShell, or Bash.
- Understanding of cloud-native security concepts and delivery pipelines.
- Familiarity with compliance-driven environments, including ISO 27001 and SOC 2.
Responsibilities
- Integrate and maintain automated security controls within CI/CD pipelines, including SAST, SCA, DAST, and IaC scans.
- Enforce security gates and policy-as-code validations across all delivery stages.
- Ensure security checks execute reliably and consistently and are never skipped or bypassed.
- Monitor the execution health of security controls and detect failures or misconfigurations.
- Maintain dashboards and metrics related to security control execution, rather than service availability.
- Collaborate with AppSec to ensure application security scans are executed correctly.
- Collaborate with CloudSec to ensure cloud security policies are enforced during deployments.
- Support security incident investigations related to control failures or pipeline bypasses, under ISO guidance.
- Maintain automated security evidence, including logs, reports, and pipeline artifacts, for audit purposes for a minimum of 24 months.
- Develop and maintain SSRE runbooks, control definitions, and operational workflows.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
