New York, New York

Grata is the leading private market dealmaking platform. We make it easy to find, research, and engage with private companies. Our platform has the most comprehensive, accurate, and searchable proprietary data on private companies, their financials, and their owners.

We help leading investors (PE/growth), investment bankers, management consultants, and corporate development teams discover and win more deals. Grata has over 700 customers and has been widely recognized as the market leader by G2, PE Wire, and more.

We are looking for a DevSecOps Engineer to join our team! You will play a pivotal role in embedding security throughout our development and operations processes. You’ll design and implement secure CI/CD pipelines, monitor system vulnerabilities, and ensure compliance with industry best practices.

Grata is a hybrid company, which means our employees work from our NYC office (near Bryant Park) on Mondays, Tuesdays and Thursdays.

At Grata, we will expect you to:

Implement and maintain cloud security best practices while ensuring compliance with frameworks such as GDPR, SOC2, and ISO by developing policies and controls.
Conduct security assessments, audits, and risk analyses to identify vulnerabilities, recommend remediation strategies, and ensure continuous compliance.
Collaborate with IT and development teams to enhance security across infrastructure, applications, and networks, while supporting and maintaining secure systems.
Implement and manage vulnerability management processes using tools like SAST, DAST, and vulnerability scanners, ensuring proactive risk mitigation.
Secure infrastructure through Infrastructure-as-Code (IaC) practices using tools such as Terraform, Ansible, and CloudFormation, automating security within CI/CD pipelines.
Monitor and respond to security incidents, troubleshoot infrastructure-related issues, and provide root cause analysis and preventive measures.
Execute security-related project work, including automation initiatives, tool development, access management, and ensuring compliance during onboarding processes.

What we are looking for:

Strong knowledge of cloud security in AWS, Azure, or GCP.
Experience building with compliance frameworks such as GDPR, SOC2, and ISO, with hands-on policy implementation.
Proficiency in IT security, including network security, identity management, and incident response.
Hands-on creating experience with security tools such as SIEM, SAST, DAST, IDS/IPS, and vulnerability management platforms.
Automating processes around security and compliance
Evangelizes a security first culture
Strong understanding of application security concepts, secure SDLC practices, and common security vulnerabilities (OWASP Top 10).
Expertise in security incident response, including detection, resolution, and preventive measures to ensure infrastructure resilience.
Proficiency in automation and infrastructure-as-code (IaC) tools such as Terraform, Ansible, and CloudFormation.
Experience with containerization and orchestration using Docker and Kubernetes.
Strong problem-solving, communication, and project management skills, with the ability to handle on-call responsibilities independently and drive security initiatives aligned with business goals

Benefits & Perks:

Medical, dental, vision plans: we offer plans with 80% coverage of premiums for employees
Company-sponsored lunch through Grubhub on a weekly basis
Unlimited PTO policy
Flexible Work Location (FWL) policy that allows you to work from home 24 days of the year
Other benefits: 12 weeks of parental leave, 401k, pre-tax commuter benefits, dog-friendly office

Grata is committed to providing competitive cash compensation and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in New York City, the estimated base salary for this role is $120,000 - $150,000 per year.

Grata is proud to be an Affirmative Action, Equal Opportunity Employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Grata considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Grata is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures.

If you need assistance or an accommodation due to a disability, please let your recruiter know. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.