R

RadarFirst

SaaS platform automating privacy incident response

Lead Platform Engineer, AI & DevSecOps Engineer - AI, DevSecOps

Full-TimeUpdated on 10/23/2026
$155k - $175k
Expert
Remote in USA+1 moreMore locations: Portland, OR, USA
RemoteRemote work is available anywhere in the U.S.; office-based work is available at the Portland, Oregon headquarters.
DevOps & InfrastructurePlatform Engineering

About the job

Requirements
  • At least 10 years of experience in DevOps, DevSecOps, site reliability engineering, platform engineering, cloud infrastructure, or a closely related engineering role.
  • A proven track record designing and operating production AWS infrastructure for SaaS or enterprise software environments.
  • Experience leading technical strategy, mentoring engineers, influencing cross-functional teams, and improving engineering culture.
  • Strong hands-on experience with infrastructure as code, continuous integration and continuous delivery, containerization, configuration management, scripting, and operational automation.
  • Experience with AWS services such as EC2, ECS, IAM, RDS, S3, Lambda, CloudWatch, OpenSearch, and related networking and security services.
  • Practical understanding of secure software development lifecycle, application security, privacy, compliance, auditability, and risk management in regulated customer environments.
  • Experience with observability platforms and practices, including metrics, logs, traces, service-level objectives, alerting, dashboards, and incident response.
  • Familiarity with AI infrastructure, LLMOps, AgentOps, or MLOps concepts, especially production monitoring, evaluations, governance, cost optimization, and safe release practices for non-deterministic systems.
  • Strong understanding of secrets management, certificates, authentication, authorization, encryption, and cloud security controls.
  • Experience with vulnerability management and security tooling such as software composition analysis, static application security testing, dynamic application security testing, interactive application security testing, runtime application self-protection, penetration testing, and security monitoring.
  • Strong communication, collaboration, leadership, analytical, and troubleshooting skills.
Responsibilities
  • Own and evolve the DevSecOps, platform engineering, and AI operations roadmap, with clear goals for reliability, security, deployment maturity, developer productivity, auditability, and customer readiness.
  • Design, implement, and operate secure, scalable, fault-tolerant AWS infrastructure for SaaS and AI workloads.
  • Implement automation to reduce manual deployment, provisioning, compliance, monitoring, and support work.
  • Monitor platform KPIs and cost drivers, including cloud spend, token consumption, model usage, latency, error rates, deployment frequency, change failure rate, recovery time, and operational toil.
  • Lead operational maturity of the agentic AI platform, including management of AWS Bedrock, AgentCore, AgentCore Gateway, agent and tool governance, policy controls, observability, evaluation workflows, and cost management.
  • Build observability across infrastructure, applications, and agentic workflows, including logs, metrics, traces, token usage, latency, error rates, tool invocation behavior, evaluation results, and customer-impacting service-level objectives.
  • Partner with Engineering, Product, Security, Compliance, and customer-facing teams to ensure AI systems meet regulated-industry expectations for auditability, access control, privacy, traceability, incident response, and defensible governance.
  • Define and evolve continuous integration and continuous delivery, infrastructure-as-code, and release-management practices that improve speed, safety, reproducibility, and rollback confidence.
  • Lead incident response and reliability improvement efforts, including post-incident reviews, root-cause analysis, alert tuning, runbooks, operational readiness reviews, and long-term remediation.
  • Maintain and improve security practices across cloud infrastructure, continuous integration and continuous delivery, secrets management, authentication, authorization, vulnerability scanning, and software supply chain controls.
  • Create shared engineering standards and paved paths that help product engineers ship safely without waiting for bespoke DevOps support.
  • Drive a DevOps-forward engineering culture by reducing team silos, improving ownership models, clarifying operational responsibilities, and coaching teams on secure, observable, supportable software delivery.
  • Mentor DevOps, platform, and software engineers; help develop future technical leaders and raise the organization's operational bar.
Desired Qualifications
  • Hands-on experience with AWS Bedrock, Amazon Bedrock AgentCore, AgentCore Gateway, or comparable agentic AI platforms.
  • Experience implementing LLM or agent evaluation frameworks, including automated regression tests, golden datasets, human review workflows, prompt/version management, safety checks, and release thresholds.
  • Experience building governance for agent tool access, including policy enforcement, identity, permissions, audit trails, redaction, approval flows, and controlled access to internal systems.
  • Experience with OpenTelemetry, CloudWatch, Datadog, Langfuse, Arize/Phoenix, Promptfoo, TruLens, OpenAI Evals, or similar AI observability/evaluation tools.
  • Experience with regulated customers in healthcare, insurance, financial services, government, or privacy/security-sensitive industries.
  • SaaS scale-up experience.
  • Certifications or training such as SANS/SEC-540, SSCP, CISSP, CAP, CSSLP, HCISPP, AWS Certified DevOps Engineer, AWS Certified Security Specialty, or AWS Certified Machine Learning Specialty.

About the company

R

RadarFirst

View
Website

RadarFirst provides an automated incident response management platform for privacy compliance in sectors such as healthcare and finance. The SaaS platform automates risk assessments and helps document, notify, and track incidents and corrective actions, with breach-law coverage guidance. Revenue comes from subscriptions plus consulting and training services. The goal is to help organizations stay compliant with privacy laws while reducing breach risk and operational costs.

Company Size

51-200

Company Stage

Series A

Total Funding

$6.2M

Headquarters

Portland, Oregon

Founded

2016

Get referred to RadarFirst

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • RadarFirst claims 98% customer retention and $100M+ customer operational savings.
  • RadarFirst says it managed 1 million incidents and delivered 4 million decisions.
  • September 2026 OneTrust surveys validate demand for AI governance and controls.

What critics are saying

  • OneTrust's March 9, 2026 real-time AI governance push commoditizes RadarFirst's expansion.
  • Salesforce, ServiceNow, and OneTrust already bundle workflow, compliance, and audit evidence.
  • If AI agents own intake and notifications, RadarFirst becomes a niche feature inside broader platforms.

What makes RadarFirst unique

  • RadarFirst’s deterministic decision engine and nine patents keep rulings explainable and defensible.
  • August 18, 2026 Agentic Layer adds AI helpers without removing human regulatory control.
  • June 9, 2026 AI Incident Management extends privacy workflows into AI governance.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Health Insurance
  • Dental Insurance
  • Life Insurance
  • Disability Insurance
  • Health Savings Account/Flexible Spending Account
  • Paid Holidays
  • Parental Leave
  • Remote Work Options
  • Hybrid Work Options

Growth & Insights and Company News

6 month growth

-1%

1 year growth

-1%

2 year growth

1%
RadarFirst
Aug 18th, 2026
RadarFirst introduces Agentic Layer to transform privacy, AI and compliance operations.

RadarFirst introduces Agentic Layer to transform privacy, AI and compliance operations. New AI agents streamline time-consuming work while RadarFirst's patented deterministic architecture keeps regulatory decisioning consistent, explainable, and defensible. PORTLAND, Ore. (August 18, 2026) -RadarFirst today announced the RadarFirst Agentic Layer, a new AI-enabled layer of the RadarFirst platform that supports purpose-built AI agents designed to automate time-consuming work across privacy, AI, and compliance operations. The Agentic Layer introduces purpose-built AI agents that prepare information, identify gaps, generate follow-up questions, prioritize cases, organize evidence, and draft communications. By handling more of the work surrounding assessments, it helps teams conduct faster, more consistent investigations and devote more time to decisions requiring human expertise. The Agentic Layer does not make regulatory decisions. It prepares work and provides recommendations for people to review, approve, and act upon. "RadarFirst is moving aggressively forward with AI without replacing the foundation that makes our regulatory decisioning trusted and defensible," said Zach Burnett, CEO at RadarFirst. "Our Agentic Layer can increasingly take work off the user's plate, but underneath it remains the patented deterministic architecture and legal intelligence that have always differentiated RadarFirst. It is agentic innovation on top, with trusted decisioning at the core." RadarFirst's core legal engine consistently applies documented policies, regulatory requirements, and structured assessment logic. Its deterministic architecture, protected by nine patents, produces outcomes that remain explainable, traceable and defensible - qualities essential to regulated work. Initial Agentic Layer capabilities include: * Intake Assistant: Guides initial incident submission through targeted questioning and pattern recognition, helping users provide complete, relevant information upfront. * Priority Assistant: Identifies potential risk after intake, surfaces higher-priority cases, and helps teams determine where to focus first. * Investigation Assistant: Identifies missing incident details and drafts targeted follow-up requests to help analysts close information gaps faster. Organizations retain control over whether and where AI capabilities are enabled. Human oversight is built into every workflow, with users reviewing recommendations, approving or overriding actions, and remaining accountable for every outcome. "The best use of AI is not replacing human judgment; it is giving people more time to use it," said Alex Layng, VP of Product at RadarFirst. "The RadarFirst Agentic Layer reduces the administrative burden that slows investigations while preserving the consistency, accountability, and trust regulated work demands." As the Agentic Layer evolves, RadarFirst plans to expand its capabilities across post-assessment activities, including reporting, regulatory notification preparation, workflow execution, and cross-functional coordination. The result is a clear operating model for responsible AI in regulated work: AI prepares the work, RadarFirst applies structured guidance, people review and decide, and the platform documents every outcome. About RadarFirst RadarFirst is an AI-forward incident management platform for privacy and AI. Trusted by leading organizations, RadarFirst enables teams to manage incidents with speed, consistency, and defensibility by standardizing how incidents are captured, assessed, and actioned. With more than a decade of experience supporting real-world privacy incidents, including over 1 million incidents managed, 4 million regulatory decisions delivered, and more than $2 trillion in revenue protected, RadarFirst brings proven operational discipline to modern regulatory risk. As AI drives greater incident volume, complexity, and scrutiny, RadarFirst helps organizations prepare before risk becomes operational, using AI-assisted capabilities to support intake, assessment, and prioritization while preserving human judgment. Let's get started. Trusted by leading organizations, RadarFirst enables teams to manage incidents with speed, consistency, and defensibility by standardizing how incidents are captured, assessed, and actioned.

RadarFirst
Jul 14th, 2026
RadarFirst recognized in the Gartner Hype Cycle for Privacy, 2026.

RadarFirst recognized in the Gartner Hype Cycle for Privacy, 2026. Jump to section. Radar First is proud that RadarFirst has been recognized as a Representative Vendor in Data Breach Response in the Gartner Hype Cycle for Privacy, 2026. For Radar First, this recognition reflects its continued commitment to helping organizations operationalize privacy incident management through consistent decision-making, regulatory intelligence, and defensible governance. As organizations adopt AI and navigate an increasingly complex regulatory environment, privacy teams are being asked to manage a broader range of risks while maintaining accountability and consistency across every decision. Radar First believe operational privacy has never been more important. Privacy incident management is evolving. Privacy incident management has traditionally focused on determining whether personal information was exposed and whether notification obligations were triggered. Today, organizations face a much broader range of privacy-related events. AI systems can generate inaccurate personal information, infer sensitive attributes, access data beyond intended boundaries, or support automated decisions with downstream privacy implications. These scenarios often require legal review, regulatory analysis, documentation, and cross-functional collaboration, even when they do not resemble a traditional data breach. As organizations deploy AI more broadly, privacy operations must evolve alongside them. Consistency matters more than ever. Managing privacy incidents is no longer simply about responding quickly. Organizations also need confidence that similar events are assessed consistently, documented thoroughly, and reviewed using repeatable decision criteria. Privacy, legal, security, compliance, and risk teams increasingly work together during incident response. Without a structured process, organizations may reach different conclusions for similar events, making governance more difficult and increasing operational risk. A documented and repeatable decision process helps organizations improve consistency, demonstrate accountability, and support regulatory readiness. AI should support decision-making, not replace it. Artificial intelligence can help privacy teams summarize information, identify relevant regulatory considerations, surface similar historical cases, and streamline investigations. These capabilities can improve efficiency. However, organizations remain responsible for the decisions they make. Effective privacy operations combine AI-assisted analysis with human expertise, documented rationale, and governance that ensures every decision can be explained and defended. Technology accelerates the work. Governance builds trust. Operational privacy is becoming a strategic capability. Privacy now intersects with security, compliance, enterprise risk, legal, and AI governance more than ever before. Organizations need a consistent operational framework for assessing incidents, coordinating stakeholders, documenting decisions, and maintaining an auditable record of how conclusions were reached. Radar First believe privacy incident management has evolved beyond workflow automation. It has become a strategic operational capability that enables organizations to respond consistently while adapting to new technologies and changing regulatory expectations. Supporting modern privacy operations. * Assess privacy-related events through structured, repeatable workflows * Apply consistent regulatory decision-making * Coordinate cross-functional investigations * Maintain defensible documentation and audit trails * Improve governance across privacy operations Radar First is proud to be recognized in the Gartner Hype Cycle for Privacy, 2026, as a Representative Vendor in Data Breach Response and remain committed to helping organizations build more consistent, accountable, and defensible privacy operations. Gartner disclaimer. GARTNER is a registered trademark and service mark, and HYPE CYCLE is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and are used herein with permission. All rights reserved. Gartner Hype Cycle for Privacy, 2026, Bart Willemsen, Bernard Woo, Nader Henein, 15 July 2026. Gartner does not endorse any vendor, product, or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Let's get started. Trusted by leading organizations, RadarFirst enables teams to manage incidents with speed, consistency, and defensibility by standardizing how incidents are captured, assessed, and actioned.

RadarFirst
Jun 9th, 2026
RadarFirst introduces AI Incident Management to help organizations operationalize AI governance.

RadarFirst introduces AI Incident Management to help organizations operationalize AI governance. As federal focus on AI security and accountability grows, RadarFirst introduces AI Incident Management to help privacy, compliance, and risk teams operationalize responsible AI governance. PORTLAND, Ore. (June 9, 2026) - Following the White House's recent Executive Order on Promoting Advanced Artificial Intelligence Innovation and Security, RadarFirst, the leader in privacy incident management and risk operations, is urging organizations to strengthen their preparedness for AI-related incidents and emerging governance requirements. As artificial intelligence becomes increasingly embedded across business operations, organizations face new challenges related to personal data exposure, unauthorized data processing, automated decision-making, model misuse, policy violations, and regulatory accountability. These risks are creating a new category of operational events that require coordinated oversight across privacy, compliance, security, legal, and risk management teams. At the same time, advances in AI are lowering barriers for threat actors, accelerating the speed and scale of attacks, and increasing the likelihood that organizations will face AI-related incidents originating from both internal misuse and external adversaries. "AI incidents are becoming business incidents, privacy incidents, and reputational incidents," said Zach Burnett, CEO of RadarFirst. "Organizations have spent years building mature processes to manage privacy incidents and regulatory obligations. AI introduces new complexities, but the need for structured assessment, documentation, accountability, and response remains the same." The Executive Order highlights a growing national focus on AI security, resilience, and accountability. While many organizations have invested heavily in AI innovation, fewer have established the operational frameworks necessary to identify, assess, document, and respond to AI-related risks and incidents. Recent industry developments further underscore the urgency of operational AI governance. On the same day the White House issued its Executive Order, Anthropic announced expanded efforts focused on frontier model security, highlighting concerns around increasingly capable AI systems, shrinking vulnerability remediation timelines, and the growing ability of malicious actors to leverage AI technologies. As AI capabilities continue to advance, organizations should expect both the volume and complexity of AI-related incidents to increase, making structured processes for AI risk management and incident response more critical than ever. To address this growing challenge, RadarFirst is introducing AI Incident Management, a new approach that extends proven privacy incident management practices into the emerging world of AI governance. Built on years of experience helping organizations assess, investigate, document, and respond to privacy incidents, RadarFirst's AI Incident Management capabilities provide a structured framework for identifying AI-related risks, coordinating investigations, documenting decisions, and demonstrating accountability across the organization. "Organizations have spent years developing mature processes for managing privacy incidents because they understand that consistent assessment, documentation, and response are critical for maintaining trust and demonstrating compliance," said Alex Layng, Vice President of Product at RadarFirst. "As AI adoption accelerates, we're seeing a similar need emerge around AI incidents. Whether it's unintended data exposure, unauthorized processing, policy violations, unexpected model behavior, or misuse by malicious actors, organizations need operational workflows that help teams identify issues early, assess impact, document decisions, and respond consistently. AI Incident Management is the natural evolution of the governance practices, privacy, and compliance teams already know they need." RadarFirst's AI Incident Management solution enables organizations to: * Identify and triage AI-related incidents and risks * Assess potential privacy, compliance, legal, and operational impacts * Standardize investigation and response workflows * Document governance decisions and remediation activities * Demonstrate accountability to regulators, auditors, customers, and stakeholders * Create a repeatable operational framework for responsible AI governance For privacy and compliance professionals, AI introduces challenges that often extend beyond traditional cybersecurity concerns. Organizations must evaluate how AI systems collect, process, retain, expose, and make decisions using personal information while maintaining compliance with evolving global privacy requirements and emerging AI regulations. "The future of AI governance is operational," added Burnett. "Organizations need more than policies and principles. They need repeatable processes that help teams respond consistently when AI-related issues arise. AI Incident Management provides the bridge between governance strategy and operational execution." "The conversation around AI risk often focuses on governance frameworks and policies," continued Burnett. "Those are important, but organizations must also prepare for the reality that AI is changing the threat landscape. As threat actors gain access to increasingly sophisticated capabilities and incident volumes continue to rise, organizations need operational processes that help them respond quickly, consistently, and defensibly when AI-related incidents occur." As regulatory scrutiny and stakeholder expectations continue to evolve, RadarFirst believes AI Incident Management will become a foundational capability for privacy, compliance, risk, and governance teams seeking to operationalize responsible AI practices and maintain trust in AI-enabled business operations. To learn more about RadarFirst's privacy and AI incident management solutions, visit www.radarfirst.com. About RadarFirst RadarFirst is an AI-forward incident management platform for privacy and AI. Trusted by leading organizations, RadarFirst enables teams to manage incidents with speed, consistency, and defensibility by standardizing how incidents are captured, assessed, and actioned. With more than a decade of experience supporting real-world privacy incidents, including over 1 million incidents managed, 4 million regulatory decisions delivered, and more than $2 trillion in revenue protected, RadarFirst brings proven operational discipline to modern regulatory risk. As AI drives greater incident volume, complexity, and scrutiny, RadarFirst helps organizations prepare before risk becomes operational, using AI-assisted capabilities to support intake, assessment, and prioritization while preserving human judgment. Let's get started. Trusted by leading organizations, RadarFirst enables teams to manage incidents with speed, consistency, and defensibility by standardizing how incidents are captured, assessed, and actioned.

GlobeNewswire
Aug 5th, 2025
RadarFirst Launches Radar Controls(TM), Bringing AI-Enabled Regulatory Mapping and Compliance Clarity to the Enterprise

RadarFirst launches Radar controls(tm), bringing ai-enabled regulatory mapping and compliance clarity to the enterprise.

GlobeNewswire
Jan 7th, 2025
RadarFirst Welcomes Zach Burnett as New Chief Executive Officer

PORTLAND, Ore., Jan. 07, 2025 (GLOBE NEWSWIRE) - RadarFirst, the premier SaaS provider for automating intelligent decisions for data incident management, is proud to announce the appointment of Zach Burnett as its new Chief Executive Officer.