Senior Security & DevSecOps Engineer
Who We Are
Ema is building the next generation of AI solutions to transform enterprise productivity by automating document-intensive workflows across industries. Whether it's drafting custom documents, automating search and extraction, or enabling reasoning over complex document workflows, our AI-powered solutions are redefining how businesses approach repetitive tasks. Founded by seasoned leaders from Google, Coinbase, and Okta, Ema is a high-growth startup backed by top-tier investors and based in Silicon Valley and Bangalore.
Role Overview
As a Senior Security & DevSecOps Engineer, you will be the guardian of Ema’s cloud-native ecosystem. You will sit at the intersection of Security, DevOps, and Engineering, ensuring that our AI agents and data platforms are built on a foundation of "Security-by-Design." This is a high-impact role where you will architect security baselines, automate guardrails, and lead our threat modeling efforts to protect sensitive enterprise data.
Key Responsibilities
Architect & Secure Infrastructure: Design and implement security baselines for Kubernetes clusters, container workloads, and cloud-native services across multi-cloud environments.
Zero-Trust & Compliance: Align cloud security controls with CIS benchmarks and Zero-Trust principles to ensure a robust defense-in-depth posture.
Detection & Response: Lead the implementation, tuning, and automation of SIEM/SOAR platforms for real-time threat detection and incident response.
Threat Modeling: Own cloud threat modeling for high-risk architectures and new AI feature rollouts, identifying vulnerabilities before they reach production.
DevSecOps Integration: Partner with DevOps and Engineering teams to embed security into CI/CD pipelines through automated scanning (SAST/DAST) and policy-as-code.
Security Governance: Build automated guardrails using CNAPP/CSPM tools and IaC scanning to prevent configuration drift.
Design Reviews: Conduct deep-dive secure architecture and design reviews early in the SDLC.
Audit & Risk: Support audit readiness for Ema’s compliance portfolio (e.g., SOC2, ISO 27001) and develop risk dashboards for leadership visibility.
Required Skills & Qualifications
Experience: 6+ years of professional experience in Cloud Security, DevSecOps, or Security Engineering.
Kubernetes Expertise: Deep hands-on experience with K8s security, including network segmentation, RBAC, and container runtime protection.
Tooling: Strong familiarity with CNAPP/CSPM, SIEM, EDR, and cloud-native logging solutions.
Security Frameworks: Practical knowledge of CIS Benchmarks, NIST, and ISO 27001 controls.
Infrastructure as Code: Proficiency in IaC tooling (Terraform and Helm preferred) and the ability to automate security via Python or Bash scripting.
Mindset: Ability to operate autonomously in a fast-paced startup environment and influence cross-functional engineering teams.
Education: Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related technical field.
Why Join Ema?
At the Forefront of AI: Work on agentic AI systems that are driving real enterprise transformation.
Mission-Critical Impact: Own the security platforms that protect the data of some of the world’s largest enterprises.
Elite Talent: Join a team of engineers and researchers from top-tier tech companies who value deep execution and technical excellence.
Ownership: Help define the architectural, cultural, and operational DNA of a company set to define a new category in AI.
Ema's Culture & Values
High Bar on Quality: We value excellence and expect world-class execution.
Ownership & Accountability: We take full responsibility for our work and outcomes.
Impact-Driven Approach: We set ambitious goals and measure success through real-world impact.
No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results.
Ema Unlimited is an equal opportunity employer and is committed to providing equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or genetics.