Own Supio’s infrastructure security and compliance programs, including SOC 2, HIPAA, and GDPR. Build and operate AWS, Kubernetes, Terraform, CI/CD, and observability platforms; develop production automation; manage cloud identity and access controls; and remediate infrastructure and application vulnerabilities. Partner with engineering to translate security findings into actionable improvements while establishing scalable processes in a fast-growing startup.
About Us
Who We're Looking For
What You’ll Do
You’re a Great Fit If You
E-Verify Participation Notice
Equal Employment Opportunity (EEO) Statement
Supio is a trusted AI platform purpose-built for law firms, reshaping how data drives impactful outcomes. Our innovative approach blends technology with deep legal expertise, making us a leader in our field. We go beyond surface-level AI to deeply understand our customers’ daily needs, empowering law firms with unparalleled data insights. Supio delivers human-level, accurate analysis of complex data and legal records, quickly and efficiently bringing critical insights when they matter most. Trusted by top litigation lawyers, our platform has supported over $1 billion in settlements.
Headquartered in Seattle with an office in San Francisco, we raised $60M Series B in April 2025 led by Sapphire Ventures with Mayfield and Thomson Reuters Ventures, bringing total funding to $91M. We're scaling rapidly and looking for exceptional talent to join us in this next phase of growth.
We're looking for passionate team members who are motivated by our mission and ready to help us achieve it.
We're looking for a senior infrastructure engineer with real security and compliance depth. You'll join Supio's DevOps team, spend most of your time building and running production infrastructure, and own our security and compliance platform as your area of the team's scope. This role suits someone who has seen how security and compliance work at scale in a larger organization and wants the autonomy to evolve that function at a fast-growing startup, someone energized by the idea that the data we protect (PII and PHI running through litigation records) is exactly the kind of data that matters most to get right.
- Own Infrastructure Compliance: Own Supio's SOC 2, HIPAA, and GDPR programs. Your job is to scale an audited program through automated evidence collection, remediations, and continuous control monitoring.
- Build and Run Infrastructure: Work as a full member of the DevOps team on our Cloud, Kubernetes, and Terraform platform, including CI/CD and observability.
- Write Production Code: Build tooling and automation. This role has real software engineering scope.
- Own Access Control: Design and maintain identity and access management across cloud, source control, and internal tooling, including least privilege, access reviews, and auditability.
- Remediate Vulnerabilities: Identify and remediate CVEs across infrastructure and application code, working directly with engineering to close gaps before they become incidents.
- Experience: 5+ years in infrastructure, platform, or SRE engineering, with direct ownership of security and compliance work at a large organization with an established program (startup experience is a plus)
- Infrastructure: Strong hands-on experience with AWS, Kubernetes, and infrastructure as code (Terraform)
- Software Engineering: Able to write and ship production code, not only scripts
- Compliance: Hands-on experience taking systems through SOC 2, HIPAA, and GDPR audits from the engineering side
- Security Remediation: Proven track record remediating CVEs across both infrastructure and software
- Access Management: Experience designing and operating IAM and access controls in a cloud environment
- Education: Bachelor's degree in Computer Science or related field, or equivalent practical experience
- Problem Solving: Comfortable owning ambiguous, cross-cutting problems with no existing playbook, and building the process as you go
- Communication: Able to translate security and compliance findings into clear, actionable guidance for engineers who aren't security specialists
Nice-to-haves
- Hands-on with automated security and compliance tooling (e.g., Vanta, SAST/SCA scanners, policy as code)
- Experience with AI governance frameworks
- Open-source contributions in security or infrastructure
- Background in a PII/PHI-heavy industry: medtech, healthtech, legal tech, insurance, or defense/security
Salary
As an early-stage startup, we offer a competitive compensation package that includes base salary, meaningful equity, and benefits. Equity grants are designed to ensure employees share in the long-term success and upside of the company.
Base Salary: $180,000 – $220,000 annually
Actual compensation will be determined based on a candidate's qualifications, skills, experience, and geographic location.
Compensation & Benefits
- 💰 Competitive Salary + Meaningful Equity
- 💹 401(k)
- ⚕️ Health, Dental, Vision, and Life Insurance
- 🏝 Flexible Time Off + Holidays
- 🧑💻 High-autonomy work environment, every Tuesday is a Remote Work Day
- 🥗 DoorDash subsidies for breakfast and dinner; Daily lunch options
- 🧋 Boba Wednesdays
- 🚃 Monthly commuter subsidies and pre-tax parking contribution
- 🚀 Team gatherings and offsites
Supio participates in E-Verify, an employment authorization program through the U.S. Department of Homeland Security and the Social Security Administration.
Supio is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Similar Jobs
Information Technology
The Senior DevSecOps Engineer embeds security throughout software development and operations. Responsibilities include implementing CI/CD security guardrails, automated SAST, DAST, SCA, secrets, and IaC scanning; managing cloud vulnerability, configuration, detection, and response tooling; supporting patching, hardening, audits, SDLC governance, incident response, and security documentation. The role requires strong cloud security, scripting, automation, compliance, penetration testing familiarity, and communication skills.
Top Skills:
AWSAzure BicepBashCi/CdCloudFormationContainerizationDastGithub ActionsGitlab CiIamInfrastructure-As-Code ScanningIso 27001JenkinsAzurePowershellPythonSastSecrets ScanningSoc 2Software Composition AnalysisTerraform
Software
Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).
Top Skills:
Api SecurityAquaAzureAzure DevopsAzure Key VaultAzure Security CenterBlack DuckBurp SuiteCheckmarxCi/CdDastGithub Advanced SecurityHashicorp VaultMendMicroservicesOwasp ZapPrisma CloudSastScaSecrets ManagementSemgrepSnykSonarqubeTerraformVeracodeWiz
Fintech • Software
Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.
Top Skills:
Api SecurityAzureCi/CdDdos ProtectionEnterprise FirewallsInfrastructure As CodeLan/WanLoad BalancingMicrosegmentationNetwork Detection And Response (Ndr)PowershellPythonSaaSSaseSd-WanSIEMSseWeb Application Firewall (Waf)Zero Trust
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
