Senior DevSecOps Engineer – Cloud Security & Compliance

Cogniify is hiring a Senior Dev Sec Ops  Engineer to strengthen the security of our cloud applications, infrastructure and delivery pipelines. Thisrole works closely with cloud engineering, Dev Ops, application, compliance and leadership teams to improve security practices, tools and operations, and toprotect data and systems from internal and external threats.

You will design secure cloud architectures, lead the investigation of complex security incidents and build security checks into CI/CD pipelines.

You will also advise teams and partners on security and incident response, and support compliance with industry standards and internal policies, including SOXand FDA requirements. This is an individual contributor role with on-call availability for critical escalations and occasional travel (about 5%).

• Design secure cloud architectures thatfollow industry best practices, standards and regulatory requirements.
• Lead cross-functional security initiatives that align with business goals and reduce risk across cloud applications and infrastructure.
• Lead the investigation and resolution ofcomplex security incidents such as malware, unauthorized access and majorbreaches, and feed lessons learned back into policies and controls.
• Analyze security logs and events to spotpatterns and build defenses against current and emerging threats.
• Assess vulnerabilities, recommend fixesand follow them through to closure.
• Build secure AWS and Azure environments using guardrails, golden paths and infrastructure-as-code patterns.
• Integrate SAST, SCA, DAST and dependencyscanning into Git Hub-based CI/CD pipelines.
• Brief leadership on the threat landscape and propose practical solutions to reduce risk.
• Advise internal teams, vendors and partners on security practices and incident response.
• Support compliance with industry standards and internal policies, including SOX and FDA requirements.
• Provide on-call support for criticalsecurity escalations.

• 9+ years of experience in IT security,cloud security or infrastructure administration in an enterprise environment(7+ years with a Master’s degree), including hands-on experience operating and implementing cybersecurity tools.
• Bachelor’s degree in a related field, oran equivalent combination of education and experience.
• Proven experience designing and managingsecurity controls in cloud platforms, including identity and access management,networking, Zero Trust, infrastructure as code, key management, CI/CD pipelines and network security.
• Experience investigating and responding to cyber events, and securing cloud environments, systems and applications.
• Experience administering IT systems and working in Agile environments with ticketing tools such as JIRA or JSM.
• Ability to improve organizationalsecurity awareness and resilience.
• Understanding of PII, PHI and sensitivedata handling, and of privacy laws such as GDPR and CPRA.
• Strong analytical, problem-solving,organizational and communication skills, with the ability to plan and runprojects with minimal supervision.
• Ability to balance confidentiality,integrity and availability, and to handle confidential data, ambiguity and shifting priorities.
• Familiarity with Agile, design thinking and user-centric design.

• Security certifications such as CISSP,CISM, CEH, OSCP or GIAC (or similar).
• AWS Certified Security – Specialty certification.
• Experience in regulated environments,with knowledge of GxP, SOX and FDA requirements.
• Technical lead or management experience in IT security or infrastructure.

• Unlimited PTO and generous parental leave.
• Medical, dental and vision coverage.
• Access to disability and life insurance.
• Mental health and wellbeing support.
• Employer Stock Purchase Program (ESPP).
• Yearly team-building experiences.
• Mentorship and sponsorship opportunities.
• Manager resources and support.
• Small, dynamic teams with opportunities to make an impact.
• Open communication with management andcompany leadership.
• An entrepreneurial culture that encourages initiative and new ideas.

We are an equal opportunity employer.

We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity,national origin, disability, veteran status or any other protected characteristic.