Drivetrain

Drivetrain

Drivetrain offers a strategic finance platform designed to streamline financial planning, enhance real-time tracking of actuals, accelerate reporting processes, and support informed decision-making for finance teams in modern businesses.

Capital Markets
11-50
Founded 2021
$15M raised

Description

  • Design, implement, and maintain security controls across AWS/GCP cloud infrastructure, CI/CD pipelines, and internal systems.
  • Lead application security efforts, including threat modeling, secure code review, and SAST/DAST integration into the development lifecycle.
  • Own vulnerability management by triaging findings and driving remediation from scans, pen tests, and bug bounty reports.
  • Monitor for security incidents, respond to events, and build and maintain incident response runbooks.
  • Manage identity and access controls, including SSO, RBAC, and least-privilege enforcement across internal and customer-facing systems.
  • Support customer security questionnaires, audits, and certifications such as SOC 2 and ISO 27001.
  • Partner with engineering teams to embed secure-by-design practices into new features and services.
  • Evaluate and implement security tooling such as secrets management, endpoint protection, and cloud security posture management.
  • Educate the broader team on security best practices and help build a security-first culture.

Requirements

  • 2+ years of experience in security engineering, application security, or a related infrastructure/security role.
  • Strong understanding of cloud security fundamentals, network security, and IAM, especially in AWS or GCP.
  • Experience with secure SDLC practices, including code review, dependency scanning, and CI/CD pipeline security.
  • Familiarity with common frameworks and standards such as OWASP Top 10, SOC 2, ISO 27001, and GDPR.
  • Hands-on scripting and automation skills in Python, Go, or similar languages for internal security tooling.
  • Experience responding to and documenting security incidents.
  • Clear communication skills with the ability to explain security risk to non-security stakeholders.
  • Experience securing a SaaS product handling sensitive financial data is preferred.
  • Prior experience leading a SOC 2 Type II or ISO 27001 audit from the engineering side is preferred.
  • Familiarity with container security tools and practices for Docker/Kubernetes and IaC scanning with Terraform is preferred.
  • Relevant certifications such as OSCP, CISSP, or CCSP are a plus.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
1 day, 19 hours ago

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
1 day, 19 hours ago

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
1 day, 19 hours ago

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

Agile C C++ Rust
1 day, 19 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers