Senior Cloud Security Engineer

Dedicated to making a difference in law enforcement agencies across the U.S., our mission is to transform policing by elevating officer performance with a preventative-based early intervention system. Driven by data science and powered by machine learning, our offering analyzes officer performance data in order to identify potentially problematic behavior. In partnership with the University of Chicago, we’ve developed the world’s largest multi-jurisdictional officer performance database, and the only research-driven, evidence-based early intervention system available in policing today.

We’re also the only provider of a fully integrated, cloud-based Software-as-a-Service (SaaS) platform that simplifies essential policing workflows. This platform is designed to be a single-source solution for all operational needs, driving extensive efficiency gains and providing best-in-class advanced analytics and insights.

Benchmark Analytics provides a comprehensive, all-in-one solution that is advancing police force management through state-of-the-art technology and market-leading data and analytics.

We’relooking for a
Senior Dev Sec Ops Engineer to join our Infrastructure & Security team. In this role,you’llown the intersection of platform reliability, cloud infrastructure, and security. You will do this by embedding security practices directly into our engineering lifecycle, rather than treating it as an afterthought.

You’llwork closely with the Director of Infrastructure & Security and across engineering teams to harden our AWS environment, mature our CI/CD pipelines,maintain our Kubernetes platform, and ensure weremainaudit-ready against CJIS and SOC 2 requirements.

You’ll alsohave the opportunity todrive automation and AI-assisted operations initiatives as we continue scaling.

This is a high-ownership role.

You’llbe trusted tooperateindependently, make sound engineering and security tradeoffs, contribute significantly to security decisions, and lead incident response when things go wrong.

• Design, build, and maintain secure AWS infrastructure across standard and Gov Cloud environments
• Own infrastructure-as-code (Terraform / Open Tofu) with a security-first mindset
• Manage IAM strategy, least-privilege access controls, and cloud security posture
• Operate and evolve our EKS-based platform including node lifecycle, workload isolation, and cluster security
• Implement andmaintainadmission control, network policies, and runtime security tooling
• Partner with engineering teams on deployment patterns and container security
• Build andmaintainsecure, automated deployment pipelines (Git Hub Actions)
• Integrate SAST, dependency scanning, secrets detection, and container image scanning into the SDLC
• Drive shift-left security practices across the engineering organization

Security & Compliance

• Maintain and improve security controls aligned to CJIS Security Policy and SOC 2 Trust Services Criteria
• Effectively and efficiently triage or resolve security alerts by working with engineering teams and/or committing code yourself
• Manage vulnerability management workflows, prioritization, and remediation tracking
  
  Support audit preparation, evidence collection, and control documentation
• Monitor for threats and respond to security findings across cloud, application, and endpoint layers
• Enforce andmaintainsoftware supply chain security across the organization
• Serve as an on-call responder for infrastructure and security incidents
• Drive post-incident reviews and own follow-up remediation items
• Develop and refine runbooks, alerting, and on-call procedures

AI & Automation

• Identify and implement automation opportunities that reduce manual operational toil
• Contribute to AI-assisted operations initiatives, including agentic workflows and observability improvements
• Apply security controls to AI tooling and LLM-integrated systems as they are introduced

Required

• 5–8 years of experience in Dev Ops,Dev Sec Ops , SRE, Cloud Engineering, or Platform Engineering roles
• Strong hands-on AWS experience: EC2, EKS, IAM, VPC, S3, and related services
• Production Kubernetes experience including cluster operations and workload security
• Experience…