Senior Security & DevSecOps Engineer

Job Overview

Who We Are Ema is building the next generation of AI solutions to transform enterprise productivity by automating document-intensive workflows across industries. Whether it's drafting custom documents, automating search and extraction, or enabling reasoning over complex document workflows, our AI-powered solutions are redefining how businesses approach repetitive tasks. Founded by seasoned leaders from Google, Coinbase, and Okta, Ema is a high-growth startup backed by top-tier investors and based in Silicon Valley and Bangalore.

Role Overview

As a Senior Security & DevSecOps Engineer, you will be the guardian of Ema’s cloud-native ecosystem. You will sit at the intersection of Security, DevOps, and Engineering, ensuring that our AI agents and data platforms are built on a foundation of \"Security-by-Design.\" This is a high-impact role where you will architect security baselines, automate guardrails, and lead our threat modeling efforts to protect sensitive enterprise data.

Key Responsibilities

• Architect & Secure Infrastructure: Design and implement security baselines for Kubernetes clusters, container workloads, and cloud-native services across multi-cloud environments.


• Zero-Trust & Compliance: Align cloud security controls with CIS benchmarks and Zero-Trust principles to ensure a robust defense-in-depth posture.


• Detection & Response: Lead the implementation, tuning, and automation of SIEM/SOAR platforms for real-time threat detection and incident response.


• Threat Modeling: Own cloud threat modeling for high-risk architectures and new AI feature rollouts, identifying vulnerabilities before they reach production.


• DevSecOps Integration: Partner with DevOps and Engineering teams to embed security into CI/CD pipelines through automated scanning (SAST/DAST) and policy-as-code.


• Security Governance: Build automated guardrails using CNAPP/CSPM tools and IaC scanning to prevent configuration drift.


• Design Reviews: Conduct deep-dive secure architecture and design reviews early in the SDLC.


• Audit & Risk: Support audit readiness for Ema’s compliance portfolio (e.g., SOC2, ISO 27001) and develop risk dashboards for leadership visibility.

Required Skills & Qualifications

• Experience: 6+ years of professional experience in Cloud Security, DevSecOps, or Security Engineering.


• Kubernetes Expertise: Deep hands-on experience with K8s security, including network segmentation, RBAC, and container runtime protection.


• Tooling: Strong familiarity with CNAPP/CSPM, SIEM, EDR, and cloud-native logging solutions.


• Security Frameworks: Practical knowledge of CIS Benchmarks, NIST, and ISO 27001 controls.


• Infrastructure as Code: Proficiency in IaC tooling (Terraform and Helm preferred) and the ability to automate security via Python or Bash scripting.


• Mindset: Ability to operate autonomously in a fast-paced startup environment and influence cross-functional engineering teams.


• Education: Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related technical field.

Why Join Ema?

At the Forefront of AI: Work on agentic AI systems that are driving real enterprise transformation. Mission-Critical Impact: Own the security platforms that protect the data of some of the world’s largest enterprises. Elite Talent: Join a team of engineers and researchers from top-tier tech companies who value deep execution and technical excellence. Ownership: Help define the architectural, cultural, and operational DNA of a company set to define a new category in AI.

Ema's Culture & Values

High Bar on Quality: We value excellence and expect world-class execution. Ownership & Accountability: We take full responsibility for our work and outcomes. Impact-Driven Approach: We set ambitious goals and measure success through real-world impact. No Hierarchy, Just Execution: Everyone is an individual contributor focused on delivering results.