Senior Security & DevSecOps Engineer

Senior Security & DevSecOps Engineer WHO WE ARE Ema is building the next generation of AI solutions to transform enterprise productivity by automating document-intensive workflows across industries. Whether it's drafting custom documents, automating search and extraction, or enabling reasoning over complex document workflows, our AI-powered solutions are redefining how businesses approach repetitive tasks. Founded by seasoned leaders from Google, Coinbase, and Okta, Ema is a high-growth startup backed by top-tier investors and based in Silicon Valley and Bangalore. ROLE OVERVIEW As a Senior Security & DevSecOps Engineer, you will be the guardian of Ema’s cloud-native ecosystem. You will sit at the intersection of Security, DevOps, and Engineering, ensuring that our AI agents and data platforms are built on a foundation of "Security-by-Design." This is a high-impact role where you will architect security baselines, automate guardrails, and lead our threat modeling efforts to protect sensitive enterprise data. KEY RESPONSIBILITIES - Architect & Secure Infrastructure: Design and implement security baselines for Kubernetes clusters, container workloads, and cloud-native services across multi-cloud environments. - Zero-Trust & Compliance: Align cloud security controls with CIS benchmarks and Zero-Trust principles to ensure a robust defense-in-depth posture. - Detection & Response: Lead the implementation, tuning, and automation of SIEM/SOAR platforms for real-time threat detection and incident response. - Threat Modeling: Own cloud threat modeling for high-risk architectures and new AI feature rollouts, identifying vulnerabilities before they reach production. - DevSecOps Integration: Partner with DevOps and Engineering teams to embed security into CI/CD pipelines through automated scanning (SAST/DAST) and policy-as-code. - Security Governance: Build automated guardrails using CNAPP/CSPM tools and IaC scanning to prevent configuration drift. - Design Reviews: Conduct deep-dive secure architecture and design reviews early in the SDLC. - Audit & Risk: Support audit readiness for Ema’s compliance portfolio (e.g., SOC2, ISO 27001) and develop risk dashboards for leadership visibility. REQUIRED SKILLS & QUALIFICATIONS - Experience: 6+ years of professional experience in Cloud Security, DevSecOps, or Security Engineering. - Kubernetes Expertise: Deep hands-on experience with K8s security, including network segmentation, RBAC, and container runtime protection. - Tooling: Strong familiarity with CNAPP/CSPM, SIEM, EDR, and cloud-native logging solutions. - Security Frameworks: Practical knowledge of CIS Benchmarks, NIST, and ISO 27001 controls. - Infrastructure as Code: Proficiency in IaC tooling (Terraform and Helm preferred) and the ability to automate security via Python or Bash scripting. - Mindset: Ability to operate autonomously in a fast-paced startup environment and influence cross-functional engineering teams. - Education: Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related technical field. WHY JOIN EMA? - At the Forefront of AI: Work on agentic AI systems that are driving real enterprise transformation. - Mission-Critical Impact: Own the security platforms that protect the data of some of the world’s largest enterprises. - Elite Talent: Join a team of engineers and researchers from top-tier tech companies who value deep execution and technical excellence. - Ownership: Help define the architectural, cultural, and operational DNA of a company set to define a new category in AI. EMA'S CULTURE & VALUES - High Bar on Quality: We value excellence and expect world-class execution. - Ownership & Accountability: We take full responsibility for our work and outcomes. - Impact-Driven Approach: We set ambitious goals and measure success through real-world impact. - No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results. Ema Unlimited is an e ... (truncated, view full listing at source)