3 days ago
Base Salary
$180k - $220k/yr
Responsibilities
- Own Supio’s SOC 2, HIPAA, and GDPR infrastructure compliance programs.
- Automate audit evidence collection, remediation workflows, and continuous control monitoring.
- Build and operate production cloud, Kubernetes, Terraform, CI/CD, and observability infrastructure.
- Develop and ship production tooling and automation.
- Design and maintain IAM and access controls across cloud, source control, and internal tools.
- Identify and remediate CVEs across infrastructure and application code in partnership with engineering.
Requirements
- 5+ years of experience in infrastructure, platform, or SRE engineering, including direct ownership of security and compliance work at a large organization.
- Strong hands-on experience with AWS, Kubernetes, and Terraform.
- Ability to write and ship production software rather than only scripts.
- Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering side.
- Experience designing and operating cloud IAM and access controls.
- Bachelor’s degree in computer science or a related field, or equivalent practical experience.
- Preferred qualifications include experience with Vanta, SAST/SCA scanners, policy as code, AI governance frameworks, open-source security or infrastructure contributions, and PII/PHI-heavy industries.
Benefits
- Base salary, meaningful equity, and benefits are offered.
- Annual base salary is $180,000–$220,000.
- Equity grants are designed to provide long-term company upside.
Tech Stack
About Supio
Supio builds an AI platform for plaintiff law firms, connecting intake, case intelligence, and firm-wide analytics in a single system (Supio Agent). The privately held company, founded in 2021 and headquartered in Seattle, licenses its software to legal practices and is building compliance and data-governance tooling for sensitive matter data. Supio is backed by investors including Sapphire Ventures and Thomson Reuters Ventures and raised a Series B in 2025.