Senior DevSecOps Engineer

supio

  • Seattle, WA
  • 9 days ago
  • $180,000–$220,000 Per Year

Highlights

You're a Great Fit If YouExperience: 5+ years in infrastructure, platform, or SRE engineering, with direct ownership of security and compliance work at a large organization with an established program (startup experience is a plus)Infrastructure: Strong hands-on experience with AWS, Kubernetes, and infrastructure as code (Terraform)Software Engineering: Able to write and ship production code, not only scriptsCompliance: Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering sideSecurity Remediation: Proven track record remediating CVEs across both infrastructure and softwareAccess Management: Experience designing and operating IAM and access controls in a cloud environmentEducation: Bachelors degree in Computer Science or related field, or equivalent practical experienceProblem Solving: Comfortable owning ambiguous, cross-cutting problems with no existing playbook, and building the process as you goCommunication: Able to translate security and compliance findings into clear, actionable guidance for engineers who arent security specialistsNice-to-havesHands-on with automated security and compliance tooling (e.g., Vanta, SAST/SCA scanners, policy as code)Experience with AI governance frameworksOpen-source contributions in security or infrastructureBackground in a PII/PHI-heavy industry: medtech, healthtech, legal tech, insurance, or defense/securitySalaryAs an early-stage startup, we offer a competitive compensation package that includes base salary, meaningful equity, and benefits. This role suits someone who has seen how security and compliance work at scale in a larger organization and wants the autonomy to evolve that function at a fast-growing startup, someone energized by the idea that the data we protect (PII and PHI running through litigation records) is exactly the kind of data that matters most to get right.

Numbers & Facts

LocationSeattle, WA
Salary$180,000–$220,000 Per Year

Description

Who Were Looking ForWere looking for a senior infrastructure engineer with real security and compliance depth. Youll join Supios DevOps team, spend most of your time building and running production infrastructure, and own our security and compliance platform as your area of the teams scope. This role suits someone who has seen how security and compliance work at scale in a larger organization and wants the autonomy to evolve that function at a fast-growing startup, someone energized by the idea that the data we protect (PII and PHI running through litigation records) is exactly the kind of data that matters most to get right.What You'll DoOwn Infrastructure Compliance: Own Supios SOC 2, HIPAA, and GDPR programs. Your job is to scale an audited program through automated evidence collection, remediations, and continuous control monitoring.Build and Run Infrastructure: Work as a full member of the DevOps team on our Cloud, Kubernetes, and Terraform platform, including CI/CD and observability. Write Production Code: Build tooling and automation. This role has real software engineering scope.Own Access Control: Design and maintain identity and access management across cloud, source control, and internal tooling, including least privilege, access reviews, and auditability.Remediate Vulnerabilities: Identify and remediate CVEs across infrastructure and application code, working directly with engineering to close gaps before they become incidents.You're a Great Fit If YouExperience: 5+ years in infrastructure, platform, or SRE engineering, with direct ownership of security and compliance work at a large organization with an established program (startup experience is a plus)Infrastructure: Strong hands-on experience with AWS, Kubernetes, and infrastructure as code (Terraform)Software Engineering: Able to write and ship production code, not only scriptsCompliance: Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering sideSecurity Remediation: Proven track record remediating CVEs across both infrastructure and softwareAccess Management: Experience designing and operating IAM and access controls in a cloud environmentEducation: Bachelors degree in Computer Science or related field, or equivalent practical experienceProblem Solving: Comfortable owning ambiguous, cross-cutting problems with no existing playbook, and building the process as you goCommunication: Able to translate security and compliance findings into clear, actionable guidance for engineers who arent security specialistsNice-to-havesHands-on with automated security and compliance tooling (e.g., Vanta, SAST/SCA scanners, policy as code)Experience with AI governance frameworksOpen-source contributions in security or infrastructureBackground in a PII/PHI-heavy industry: medtech, healthtech, legal tech, insurance, or defense/securitySalaryAs an early-stage startup, we offer a competitive compensation package that includes base salary, meaningful equity, and benefits. Equity grants are designed to ensure employees share in the long-term success and upside of the company.Base Salary: $180,000 - $220,000 annuallyActual compensation will be determined based on a candidates qualifications, skills, experience, and geographic location.About Us  Supio is a trusted AI platform purpose-built for law firms, reshaping how data drives impactful outcomes. Our innovative approach blends technology with deep legal expertise, making us a leader in our field. We go beyond surface-level AI to deeply understand our customers' daily needs, empowering law firms with unparalleled data insights. Supio delivers human-level, accurate analysis of complex data and legal records, quickly and efficiently bringing critical insights when they matter most. Trusted by top litigation lawyers, our platform has supported over $1 billion in settlements.Headquartered in Seattle with an office in San Francisco, we raised $60M Series B in April 2025 led by Sapphire Ventures with Mayfield and Thomson Reuters Ventures, bringing total funding to $91M. Were scaling rapidly and looking for exceptional talent to join us in this next phase of growth.Were looking for passionate team members who are motivated by our mission and ready to help us achieve it.About Us  Supio is a trusted AI platform purpose-built for law firms, reshaping how data drives impactful outcomes. Our innovative approach blends technology with deep legal expertise, making us a leader in our field. We go beyond surface-level AI to deeply understand our customers' daily needs, empowering law firms with unparalleled data insights. Supio delivers human-level, accurate analysis of complex data and legal records, quickly and efficiently bringing critical insights when they matter most. Trusted by top litigation lawyers, our platform has supported over $1 billion in settlements.Headquartered in Seattle with an office in San Francisco, we raised $60M Series B in April 2025 led by Sapphire Ventures with Mayfield and Thomson Reuters Ventures, bringing total funding to $91M. Were scaling rapidly and looking for exceptional talent to join us in this next phase of growth.Were looking for passionate team members who are motivated by our mission and ready to help us achieve it.

Similar Jobs