Senior Security Controls Assurance Engineer

Who we are

We’re Redis. We built the product that runs the fast apps our world runs on. (If you checked the weather, used your credit card, or looked at your flight status online today, you’re welcome.) At Redis, you’ll work with the fastest, simplest technology in the business—whether you’re building it, telling its story, or selling it to our 10,000+ worldwide customers. We’re creating a faster world with simpler experiences. You in?

Why You’ll Love This Job

You’re not here to tick boxes. You’re here to build systems that make those boxes obsolete. As part of our Cyber Resilience organization, you’ll automate, streamline, and modernize the way we manage and measure cybersecurity controls—improving our defense and making life easier for both auditors and engineers (yes, it’s possible). If you’re the kind of person who gets a kick out of turning manual chaos into code-driven clarity, you’ll fit right in. This role will be a key provider of technical expertise and enablement to our Program, Risk & Governance team. You’ll live in the intersection of threat, defense, and risk and make a meaningful impact on how we defend Redis, our products, and our customers.

What You Will Do

Design and build automated processes to continuously measure the effectiveness of cybersecurity controls—because if it’s not measurable, it’s not manageable.
Translate policy requirements into code and embed them in CI/CD pipelines, turning security into a feature, not a fire drill.
Automate the entire control assessment lifecycle: evidence gathering and tool integrations—no more “death by screenshot.”
Stay plugged into the latest in policy-as-code, automated control remediation, and risk management. Bring back the best ideas and help us stay ahead.

What You Will Need

A curious, self-directed mindset—you don’t wait around for someone to tell you what to do.
Technical aptitude: you’re comfortable picking up new tools and figuring things out on your own.
A knack for balancing multiple priorities and projects without dropping the ball.
Strong communication skills with a bias for transparency, collaboration, and trust.

Extra Great If You Have

Hands-on experience with policy-as-code tools like Open Policy Agent (OPA), HashiCorp Sentinel, or similar.
Familiarity with common compliance frameworks (NIST, ISO 27001, SOC 2) and how to make them suck less.
Prior experience integrating security or compliance into CI/CD pipelines.
Previous work in audit, risk, or compliance functions—especially if you got frustrated and decided to automate everything.

We give back to our employees:

At Redis, our culture makes work fun and rewarding. We support our team members with fantastic benefits and perks to enhance their professional and personal lives:

Competitive compensation package, including salary and equity grants.
25 days of flexible vacation time.
Hybrid working options, allowing you to work from both home and the office.
Monthly allowance for home internet and phone.
One-time home-office setup allowance.
Complimentary lunch and snacks in the office.

#LI-DM3
#LI-HYBRID

As a global company, we value a culture of curiosity, diversity of thought, and innovation from our employees, customers, and partners. Redis is committed to a diverse and inclusive work environment where all employees’ differences are celebrated and supported, and everyone feels safe to bring their authentic selves to work. Redis is dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national orientation, sexual orientation, age, marital status, disability, gender identity, gender expression, Veteran status, or any other classification protected by federal, state, or local law. We strive to create a workplace where every voice is heard, and every idea is respected.

Redis is committed to working with and providing access and reasonable accommodation to applicants with mental and/or physical disabilities. If you think you may require accommodations for any part of the recruitment process, please send a request to [email protected]. All requests for accommodations are treated discreetly and confidentially, as practical and permitted by law.

Redis reserves the right to retain data longer than stated in the privacy policy in order to evaluate candidates.