Secure Site Reliability Engineer
About The Position
The Security Site Reliability Engineer (SSRE) works within the SecOps domain and reports to the Information Security Officer (ISO). The role ensures the reliability, consistency, and continuous execution of security controls across CI/CD pipelines and cloud delivery workflows. It focuses on automating security controls, enforcing policy-as-code, and ensuring security validations execute as designed throughout the delivery lifecycle. The role owns the execution and enforcement of security controls, rather than application security testing, cloud configuration ownership, or service uptime. Zenus is headquartered in San Juan, Puerto Rico, and operates in over 150 countries. The company’s mission is to facilitate banking beyond borders, including enabling people and businesses to open US bank accounts online. This position is hybrid, with three days on-site and two days remote.
Requirements
- At least 3 years of experience in DevSecOps, security engineering, or CI/CD automation roles.
- Strong hands-on experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or Jenkins.
- Experience integrating security scanning tools into pipelines.
- Knowledge of Infrastructure as Code, such as Terraform, Bicep, or ARM, from a validation perspective.
- Experience with scripting and automation using Python, PowerShell, or Bash.
- Understanding of cloud-native security concepts and delivery pipelines.
- Familiarity with compliance-driven environments such as ISO 27001 and SOC 2.
Responsibilities
- Integrate and maintain automated security controls within CI/CD pipelines, including SAST, SCA, DAST, and IaC scans.
- Enforce security gates and policy-as-code validations across all delivery stages.
- Ensure security checks execute reliably and consistently and are not skipped or bypassed.
- Monitor the execution health of security controls and detect failures or misconfigurations.
- Maintain dashboards and metrics related to security control execution, not service availability.
- Collaborate with AppSec to ensure application security scans are executed correctly.
- Collaborate with CloudSec to ensure cloud security policies are enforced during deployments.
- Support security incident investigations related to control failures or pipeline bypasses under ISO guidance.
- Maintain automated security evidence, including logs, reports, and pipeline artifacts, for a minimum of 24 months for audit purposes.
- Develop and maintain SSRE runbooks, control definitions, and operational workflows.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
