Sysdig
Trust & Assurance Lead
Flexible - USA · Full-time
Sponsorship not specifiedDetected 43 days ago
PythonGoExpressKubernetesTerraformRESTCybersecurityDetection EngineeringComplianceAuditingInternal Audit
Stay score
odds of building a lasting career here
36Risky
Cap-exempt (no lottery)0
Sponsors this role75
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70
Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Green-card filing pattern in this occupation
Context, not a finding about this posting: of this employer's 5 green-card filings in this occupation, 100% were for a worker who already held the job.
Files H-1B transfers
4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Creators of technology trusted by over 60% of the Fortune 500, Sysdig gives teams the real-time clarity to move fast and defend what matters most.
- Today, most evidence for those certifications is still collected by hand.
Responsibilities
- You'll also build one program from nothing: AI assurance, covering both our own AI systems and the AI questions now arriving in every enterprise deal.
- We maintain ISO 27001, ISO 27701, and SOC 2 Type II, and we're moving entirely off point-in-time assessments.
- Your job is to make it a pipeline output: controls that report their own state, validation running continuously against production, and an audit that becomes a query against something already running.
- This is a senior individual contributor role with the latitude to design and build the program you wished existed.
- Rebuild assurance as engineering. Instrument controls so they report their own state, express policy as code, and detect control drift in near real time. Route failures to the team that owns the system, not a spreadsheet.
- Own the certification program end-to-end.
- You own the ISMS and PIMS artifacts and the quarterly security objectives, and you run the independent internal audit and the external assessors.
- Drive down the cost of proof. Labor per audit cycle should fall year over year. That number shows the engineering work is real, and it is the one we will hold you to.
- Build AI assurance from nothing.
- Define and instrument controls for model and agent behavior, for data handling inside AI systems, and for AI-assisted development in our own engineering organization.
Requirements
- Recognized as a Best Place to Work and one of Deloitte's fastest-growing companies for the past 5 years, we're here to raise the standard for what cloud security and workplace culture should be.
Compensation
- The U.S. annual salary range for this full-time position is between 160,000 and 200,000 USD/year.
Company info
- At Sysdig, we believe cloud security isn't a compromise - it's a promise.
- From the start, our mission has been clear: to help organizations secure innovation in the cloud, the right way.
- You'll own how Sysdig proves its security claims - to auditors, to enterprise customers, and to regulators - and you'll rebuild that function as engineering rather than paperwork.
- Be customer zero for assurance. Where Sysdig's own platform can produce the evidence, use it in production before customers do, then tell product where it falls short. You'll have as much roadmap influence as you're willing to take.
- Have shipped code or automation in service of a control objective - Python, Go, Terraform, CI pipelines, or an API wired into a compliance platform. We are not hiring a software engineer, and we are not hiring someone who has never opened a terminal
This listing is sourced directly from Sysdig's careers page and normalized into a canonical job model.