DevSecOps

For many of us there’s that one podcast we never miss, and video content is part of our daily routine, whether it’s professional or personal. But how many of us truly understand the effort that goes on behind the scenes? Here at Riverside, we know it well. That’s exactly why we built an AI-powered platform that helps content creators, podcasters, marketeers, and more at major brands like Netflix, Disney, Google, and Microsoft to create high-quality content with ease.

Riverside’s technology streamlines the entire content creation process, turning ideas into professional-grade content with the highest production standards, without requiring expensive equipment or external services. The secret? AI-driven tools that replace traditional production roles like editing, directing, and design, automating the entire process at the click of a button.

About The Engineering Team

We’re a team of smart, curious engineers building scalable, reliable systems that power content creation for millions. We work with modern web technologies, tackle real-world challenges in distributed systems, and keep things practical - no overengineering, just solid solutions. If you love solving tough problems, moving fast, and building tech that creators actually use, you’ll fit right in.

On your day-to-day

As a dedicated DevSecOps, you will bridge the gap between code and infrastructure to build a fortress around our creators' content. You’ll spend your time defining and implementing high-level security processes while rolling up your sleeves to fix vulnerabilities alongside our DevOps team. From architecting DSPM strategies for massive distributed video data to hardening our SDLC, you will be the ultimate owner of our security posture. You won’t just be monitoring dashboards; you’ll be collaborating directly with developers to ensure security is a fundamental part of our engineering.

Requirements:

What Will Make You Stand Out?

• The "Big Head" Mentality: You take full ownership of Riverside’s security landscape, thinking three steps ahead of potential threats to our platform and PII.
• Hybrid Technical Depth: 4+ years of experience blending AppSec, DevSecOps, and SecOps - you are as comfortable discussing IAM roles and CSPM as you are performing a deep-dive code review.
• Security at Scale: Proven experience securing massive, distributed data environments, specifically protecting high-value customer content and ensuring PII integrity at scale.
• Security Orchestrator: Strong hands-on experience with modern cloud infrastructure (AWS) and the ability to integrate security tooling directly into GitHub Actions, Kubernetes, and Terraform workflows.
• The GRC Advantage: A solid understanding of compliance frameworks (SOC2, GDPR).
• Collaborative Fixer: Exceptional communication skills with the ability to "speak developer" - you don't just hand over a list of bugs, you help the team engineer the