Secure Site Reliability Engineer

About Zenus

 Zenus’ mission is to facilitate banking beyond borders. Operating in over 150 countries, we enable people and businesses to open a US bank account online, without the need to be a US citizen, resident, or a company registered in the US — opening up the security, stability and freedom of US banking to the world. As a signatory of the UN’s Principles for Responsible Banking, we are committed to making finance fair.

Our state-of-the-art technology, exclusive partnerships and proprietary processes are now being made available via our embedded banking services to enable other businesses to create new financial service experiences for their customers.

Headquartered in San Juan, Puerto Rico we have a diverse and inclusive team.

This position ishybrid, requiringon-site presence with a schedule of:

• 3 days on-site
• 2 days remote

About the role

TheSecurity Site Reliability Engineer (SSRE) is responsible for ensuring thereliability, consistency, and continuous execution of security controls across CI/CD pipelines and cloud delivery workflows.
Operating within theSecOps domain and reporting to theInformation Security Officer (ISO), the SSRE focuses onautomating security controls, enforcing policy-as-code, and guaranteeing that security validations always execute as designed throughout the delivery lifecycle.

This role ownshow security controls are executed and enforced, not application security testing, cloud configuration ownership, or service uptime.

Responsibilities & duties:

• Integrate and maintainautomated security controls within CI/CD pipelines (SAST, SCA, DAST, IaC scans).
• Enforcesecurity gates and policy-as-code validations across all delivery stages.
• Ensure thereliability and consistency of security checks (controls never skipped or bypassed).
• Monitor execution health of security controls and detect failures or misconfigurations.
• Maintain dashboards and metrics related tosecurity control execution (not service availability).
• Collaborate withAppSec to ensure application security scans are executed correctly.
• Collaborate withCloudSec to ensure cloud security policies are enforced during deployments.
• Support security incident investigations related tocontrol failures or pipeline bypasses, under ISO guidance.
• Maintain automated security evidence (logs, reports, pipeline artifacts) for audit purposes (minimum 24 months).
• Develop and maintain SSRE runbooks, control definitions, and operational workflows.

What you need for this role:

• 3+ years of experience inDevSecOps, security engineering, or CI/CD automation roles.
• Strong hands-on experience withCI/CD platforms (Azure DevOps, GitHub Actions, Jenkins).
• Experience integratingsecurity scanning tools into pipelines.
• Knowledge ofInfrastructure as Code (Terraform, Bicep, ARM) from a validation perspective.
• Experience with scripting and automation (Python, PowerShell, Bash).
• Understanding of cloud-native security concepts and delivery pipelines.
• Familiarity with compliance-driven environments (ISO 27001, SOC 2).