SRE Security

Realize your potential by joining the leading performance-driven advertising company!

The ideal candidate will bridge high-level security governance with hands-on, automated security implementation across the Software Development Life Cycle (SDLC).

This individual will be a critical enabler, empowering teams to move swiftly and deliver exceptional value to our clients, all while upholding the required security standards. A proven track record in successfully balancing rapid innovation with robust security practices is essential for this role.

To thrive in this role you’ll need :

• Deep DevSecOps Expertise : 5+ years of experience in a senior DevSecOps or Application / Product Security role, with a strong, working knowledge of DevSecOps principles and the modern application threat landscape (e.g., OWASP Top 10).
• DevSecOps Focus : Proven ability to “shift left” security by embedding automated security controls (SAST, DAST, SCA, IAST) into CI / CD pipelines.
• Open Source Security & Supply Chain Mastery : Deep, hands-on experience managing and hardening open-source software dependencies.
• Key Focus : Expertise in utilizing Software Composition Analysis (SCA) tools (e.g., Dependency-Check, Snyk, Black Duck) to maintain an accurate Software Bill of Materials (SBOM) for all products.
• Vulnerability & Risk Management Pro : Proven ability to establish and own a continuous CVE tracking and remediation process.
• Key Focus : Expertise in risk-rating vulnerabilities based on exploitability and business impact, and driving engineering teams to remediate security risks efficiently using automation and clear Service Level Objectives (SLOs).
• Audit & Compliance Automation : Proven, hands-on experience managing security audits and certification programs (e.g., SOC 2, ISO 27001) by leveraging “security as code” principles and automating evidence collection to demonstrate compliance across the pipeline.
• Leadership & Influence : Strong leadership skills with the ability to build consensus and partner with R&D, Platform Engineering, and IT teams to embed security practices without being a bottleneck.

How you’ll make an impact :

As the DevSecOps Engineer, you will be responsible for creating a secure-by-design culture and leading the operational implementation of our security strategy. You will :