Drivetrain

Drivetrain

Drivetrain offers a strategic finance platform designed to streamline financial planning, enhance real-time tracking of actuals, accelerate reporting processes, and support informed decision-making for finance teams in modern businesses.

Capital Markets
11-50
Founded 2021
$15M raised

Description

  • Design, implement, and maintain security controls across AWS/GCP cloud infrastructure, CI/CD pipelines, and internal systems.
  • Lead application security efforts, including threat modeling, secure code review, and SAST/DAST integration into the development lifecycle.
  • Own vulnerability management by triaging findings and driving remediation from scans, pen tests, and bug bounty reports.
  • Monitor for security incidents, respond to events, and build and maintain incident response runbooks.
  • Manage identity and access controls, including SSO, RBAC, and least-privilege enforcement across internal and customer-facing systems.
  • Support customer security questionnaires, audits, and certifications such as SOC 2 and ISO 27001.
  • Partner with engineering teams to embed secure-by-design practices into new features and services.
  • Evaluate and implement security tooling such as secrets management, endpoint protection, and cloud security posture management.
  • Educate the broader team on security best practices and help build a security-first culture.

Requirements

  • 2+ years of experience in security engineering, application security, or a related infrastructure/security role.
  • Strong understanding of cloud security fundamentals, network security, and IAM, especially in AWS or GCP.
  • Experience with secure SDLC practices, including code review, dependency scanning, and CI/CD pipeline security.
  • Familiarity with common frameworks and standards such as OWASP Top 10, SOC 2, ISO 27001, and GDPR.
  • Hands-on scripting and automation skills in Python, Go, or similar languages for internal security tooling.
  • Experience responding to and documenting security incidents.
  • Clear communication skills with the ability to explain security risk to non-security stakeholders.
  • Experience securing a SaaS product handling sensitive financial data is preferred.
  • Prior experience leading a SOC 2 Type II or ISO 27001 audit from the engineering side is preferred.
  • Familiarity with container security tools and practices for Docker/Kubernetes and IaC scanning with Terraform is preferred.
  • Relevant certifications such as OSCP, CISSP, or CCSP are a plus.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Cyber Defense Manager

JustMarkets 1-10 Capital Markets

Cyber Defense Manager at the company leads and operates security operations to improve threat detection, incident response, exposure reduction, and overall resilience across the environment.

AWS Azure Cybersecurity Elasticsearch GCP SIEM Splunk
46 minutes ago

Senior Endpoint Consultant

Planet Technologies 251-1K Internet Software & Services

Planet Technologies is hiring a Senior Endpoint Consultant to lead Microsoft endpoint and cloud implementation projects for public sector customers, from assessment through delivery and migration.

Azure
1 hour, 31 minutes ago

Microsoft Security Engineer- Remote (Anywhere in the U.S.)

GuidePoint Security 251-1K Internet Software & Services

GuidePoint Security is seeking a Microsoft Cloud Security Engineer to deliver hands-on identity, data protection, and endpoint security engagements for clients across small businesses and large enterprises.

Active Directory Azure Network Security OpenID Connect Power BI PowerShell SAML SIEM
1 day, 1 hour ago

Cloud Security Software Engineer

First Due 51-250 Internet Software & Services

First Due is hiring a Cloud Security Software Engineer to build autonomous AI tools and agent-driven workflows for its cloud security plane supporting fire and EMS software operations.

Ansible AWS Go OWASP Python SIEM SOC Terraform TypeScript
1 day, 1 hour ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers