YipitData (Alternative)

DevSecOps Lead

US Remote · Staff+

Sponsorship not specifiedDetected 13 days ago

Code ReviewGitCI/CDGitHub ActionsJenkinsDevOpsCybersecurityComplianceValuationSupply ChainResearch

About the role

This is a hands-on, cross-functional role focused on improving developer workflows, strengthening CI/CD controls, and driving measurable risk reduction without slowing teams down.
This position reports to the Senior Director of Information Security and offers the opportunity to shape DevSecOps practices at a high-growth company.
This is a remote-friendly opportunity that can sit in NYC (where our headquarters is located), one of our office hubs (Austin, Miami, Los Angeles (CA), and Cupertino (CA)), or anywhere else in the US.

Responsibilities

We move fast, support each other, and aim high, always with purpose and intention
Own the roadmap for secure SDLC controls and partner with Engineering and Product to roll out standards that are practical, scalable, and auditable.
Develop and maintain secure development policies, implementation standards, and guidance for engineering teams.
Drive adoption of key controls across repositories and pipelines, including branch protection, pull request requirements, code review, secrets scanning, dependency scanning, infrastructure-as-code scanning, and container image scanning.
Partner with Engineering and Product teams to integrate security guardrails into CI/CD workflows and developer tooling.
Support vulnerability management operations, including intake, triage, remediation tracking, verification, and reporting.
Build reference implementations, templates, and onboarding guidance to help teams adopt secure patterns consistently.
The Security team is seeking a DevSecOps Lead/Staff Engineer to build and scale our secure software development lifecycle and vulnerability management practices across the organization.
This role will partner closely with Engineering, Platform, and Security to implement practical security standards and controls from code development through deployment and production.

Nice to have

Have 6+ years of experience in DevSecOps, security engineering, application security, cloud security, or DevOps, including experience leading cross-functional programs or technical initiatives.
Have implemented or governed controls such as branch protection, code review, secrets scanning, SAST, SCA, infrastructure-as-code scanning, or container scanning.
Can translate security requirements into clear standards and practical implementation plans that work for engineering teams.
Are comfortable influencing stakeholders across Security, Engineering, and leadership.
Have experience with GitHub Enterprise, GitHub Actions, Jenkins, or similar platforms, preferred.
Have experience supporting SOC 2, audit readiness, or customer assurance efforts, preferred.
Are familiar with software supply chain security concepts such as SBOMs, image signing, and artifact integrity, preferred.

Skills

Understand Git-based workflows, CI/CD systems, cloud-native development, containers, and repository security controls.

Compensation

The annual base compensation for this position is anticipated to be up to 250k + 10% target variable.

Benefits

Our compensation package includes comprehensive benefits, perks, and a competitive salary:
We offer flexible work hours, flexible vacation, a generous 401K match, parental leave, team events, wellness budget, learning reimbursement, and more.
Define and report on metrics such as control coverage, vulnerability aging, SLA performance, and remediation progress.

Company info

YipitData is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B. Every day, our proprietary technology analyzes billions of alternative data points to uncover actionable insights across sectors like software, AI, cloud, e-commerce, ridesharing, and payments.
Our data and research teams transform raw data into strategic intelligence, delivering accurate, timely, and deeply contextualized analysis that our customers, ranging from the world's top investment funds to Fortune 500 companies, depend on to drive high-stakes decisions. From sourcing and licensing novel datasets to rigorous analysis and expert narrative framing, our teams ensure clients get not just data, but clarity and confidence.
What It's Like to Work at YipitData:
YipitData isn't a place for coasting. It's a launchpad for ambitious, impact-driven professionals.
YipitData is the leading market research and analytics firm for the disruptive economy and most recently raised $475M from The Carlyle Group at a valuation of over $1B.
Every day, our proprietary technology analyzes billions of alternative data points to uncover actionable insights across sectors like software, AI, cloud, e-commerce, ridesharing, and payments.
Our data and research teams transform raw data into strategic intelligence, delivering accurate, timely, and deeply contextualized analysis that our customers, ranging from the world's top investment funds to Fortune 500 companies, depend on to drive high-stakes decisions.
From sourcing and licensing novel datasets to rigorous analysis and expert narrative framing, our teams ensure clients get not just data, but clarity and confidence.
YipitData isn't a place for coasting.
It's a launchpad for ambitious, impact-driven professionals.
From day one, you'll take the lead on meaningful work, accelerate your growth, and gain exposure that shapes careers.
Why Top Talent Chooses YipitData:
Ownership That Matters: You'll lead high-impact projects with real business outcomes
Rapid Growth: We compress years of learning into month

Equal opportunity

equal opportunity employer.

Visa & Work Authorization

Please note that for this position, we are not able to consider candidates who currently or in the future will require visa sponsorship.

Apply directly at YipitData (Alternative) →Create a free account for alerts like this View YipitData (Alternative) immigration profile

This listing is sourced directly from YipitData (Alternative)'s careers page and normalized into a canonical job model.