DevSecOps Lead, YipitData

$212.5-250k

+ 10% target variable. Depending upon where the remote work is performed, income could be subject to New York State tax withholding

Jenkins

Branch

DevOps

Senior and Expert level

Austin

Los Angeles

Miami

New York

San Francisco Bay Area

Remote from US

More information about location

Alternative data driven market & investment research firm

Open for applications

Alternative data driven market & investment research firm

501-1000 employees

FintechB2BInvestingAnalyticsMarket researchFinancial ServicesSaaSCapital Markets

Open for applications

$212.5-250k

+ 10% target variable. Depending upon where the remote work is performed, income could be subject to New York State tax withholding

Jenkins

Branch

DevOps

Senior and Expert level

Austin

Los Angeles

Miami

New York

San Francisco Bay Area

Remote from US

More information about location

501-1000 employees

FintechB2BInvestingAnalyticsMarket researchFinancial ServicesSaaSCapital Markets

Company mission

To usher in the new era of market research.

Job

Company

Role

Who you are

Have 6+ years of experience in DevSecOps, security engineering, application security, cloud security, or DevOps, including experience leading cross-functional programs or technical initiatives
Have experience building or improving Secure SDLC, CI/CD security, or vulnerability management programs in modern engineering environments
Understand Git-based workflows, CI/CD systems, cloud-native development, containers, and repository security controls
Have implemented or governed controls such as branch protection, code review, secrets scanning, SAST, SCA, infrastructure-as-code scanning, or container scanning
Can translate security requirements into clear standards and practical implementation plans that work for engineering teams
Are comfortable influencing stakeholders across Security, Engineering, and leadership
Have experience with GitHub Enterprise, GitHub Actions, Jenkins, or similar platforms, preferred
Have experience supporting SOC 2, audit readiness, or customer assurance efforts, preferred
Are familiar with software supply chain security concepts such as SBOMs, image signing, and artifact integrity, preferred

What the job involves

The Security team is seeking a DevSecOps Lead/Staff Engineer to build and scale our secure software development lifecycle and vulnerability management practices across the organization
This role will partner closely with Engineering, Platform, and Security to implement practical security standards and controls from code development through deployment and production
You will help define how secure software gets built at YipitData by translating security requirements into clear policies, technical standards, and scalable processes
This is a hands-on, cross-functional role focused on improving developer workflows, strengthening CI/CD controls, and driving measurable risk reduction without slowing teams down
This position reports to the Senior Director of Information Security and offers the opportunity to shape DevSecOps practices at a high-growth company
Own the roadmap for secure SDLC controls and partner with Engineering and Product to roll out standards that are practical, scalable, and auditable
Develop and maintain secure development policies, implementation standards, and guidance for engineering teams
Drive adoption of key controls across repositories and pipelines, including branch protection, pull request requirements, code review, secrets scanning, dependency scanning, infrastructure-as-code scanning, and container image scanning
Partner with Engineering and Product teams to integrate security guardrails into CI/CD workflows and developer tooling
Support vulnerability management operations, including intake, triage, remediation tracking, verification, and reporting
Build reference implementations, templates, and onboarding guidance to help teams adopt secure patterns consistently
Define and report on metrics such as control coverage, vulnerability aging, SLA performance, and remediation progress
Prepare audit-ready documentation and evidence that demonstrates controls are implemented and operating effectively
Evaluate and prioritize future enhancements such as SAST, DAST, SBOM generation, image signing, and broader software supply chain security improvements

Our take

Annual expenditure on data sets amongst US asset managers has grown to over $1 Billion since the turn of the decade, and is only increasing. Alternative data providers like YipitData are providing answers to such investors.

By focusing on disruptive, digital-first sectors, the company provides maximum value to their clients. This is because, in recent times, many of the highest-growth opportunities have been the hardest to price. By supporting this pricing, YipitData is a stand-out.

Thus, the company has emerged as a leading provider of highly accurate and detailed research and analytics in the rapidly evolving landscape of disruptive and digitally enabled sectors. With an impressive client base in the hundreds and significant funding behind it, YipitData is poised to expand innovation and venture into new markets.

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

40% female employees

-10% employee growth in 12 months

Glassdoor (4)

Company

Funding (last 2 of 5 rounds)

Dec 2021

$475m

SERIES E

May 2019

$85m

LATE VC

Total funding: $577m

Company benefits

Flexible work hours
Flexible vacation
Generous 401K match
Parental leave
Team events
Wellness budget
Learning reimbursement

Company HQ

Midtown South, New York, NY

Leadership

Vinicius Vacanti

(Founder & CEO)

Prior to YipitData, they were an Associate at Quadrangle Group and an Analyst at The Blackstone Group.

Salary benchmarks

We don't have enough data yet to provide salary benchmarks for this role.

Submit your salary to help other candidates with crowdsourced salary estimates.

Share this job

View 29 more jobs at YipitData