Secure Site Reliability Engineer
Zenus Bank is a Puerto Rico-chartered international digital bank providing cross-border USD banking, embedded accounts, payment rails, Visa card sponsorship, FX, compliance, settlement, and stablecoin infrastructure.
Funding history
Projects
About Zenus Bank
Founded in 2019, Zenus Bank operates as an International Financial Entity under Puerto Rico law and is regulated by OCIF under license IFE-061. Its current platform provides global USD accounts, embedded virtual accounts, cross-border payment rails, Visa debit/credit/corporate/crypto card programs, foreign exchange, compliance-as-a-service, 24/7 settlement, and USDC/stablecoin on-ramp and off-ramp capabilities. The bank describes itself as full-reserve and states that it is not FDIC-insured.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will ensure security controls execute reliably across CI/CD and cloud delivery workflows. You will integrate security scans, enforce policy-as-code gates, monitor control health, maintain security metrics and evidence, collaborate on deployment security, support control-failure investigations, and maintain runbooks and operational workflows.
Requirements
- Three or more years of experience in DevSecOps, security engineering, or CI/CD automation
- Experience with Azure DevOps, GitHub Actions, or Jenkins
- Experience integrating security scanning tools into pipelines
- Knowledge of Terraform, Bicep, or ARM validation
- Experience with Python, PowerShell, or Bash scripting and automation
- Understanding of cloud-native security concepts and delivery pipelines
- Familiarity with ISO 27001 and SOC 2
Responsibilities
- Integrate and maintain automated security controls in CI/CD pipelines
- Enforce security gates and policy-as-code validations across delivery stages
- Ensure security checks are not skipped or bypassed
- Monitor security control execution and detect failures or misconfigurations
- Maintain dashboards and metrics for security control execution
- Collaborate with AppSec to ensure security scans execute correctly
- Collaborate with CloudSec to enforce cloud security policies during deployments
- Support investigations of control failures or pipeline bypasses
- Maintain automated security evidence for audit purposes
- Develop and maintain SSRE runbooks, control definitions, and operational workflows
Benefits
- Hybrid work schedule with 3 days on-site and 2 days remote
