2 days ago
Remote, EMEA or United Kingdom (city not specified)Senior
Responsibilities
- Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in delivery workflows.
- Implement report-only, warning, blocking, and self-service exception policies using risk evidence and documented controls.
- Build automation and AI-assisted workflows that enrich findings, propose fixes, and support engineering triage with required review and rollback safeguards.
- Monitor coverage, integration failures, finding age, remediation metrics, false blocks, build delay, bypasses, and GRC evidence.
- Partner with Infrastructure on cloud-posture monitoring and bounded remediation automation.
- Extend shared-image hardening and artifact provenance capabilities as delivery foundations mature.
- Map delivery paths and gaps, deliver an initial scanning integration, establish enforcement rules, and baseline rollout metrics during the first three months.
Requirements
- Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
- Ability to write maintainable production automation and explain the failure modes of shipped systems.
- Experience with GitHub Actions or comparable systems, Terraform, containers, and cloud controls.
- Comfort writing production automation in TypeScript, Python, Go, or a comparable language.
- Ability to apply AI in engineering and evaluate its outputs, permissions, reliability, and safeguards.
- Supply-chain and scanner experience is useful, but individual tools can be learned on the job.
- Ability to investigate ambiguous problems, write proposals, collaborate with partner teams, and improve adoption and reliability after launch.
Benefits
- Competitive salary and equity.
- 10-year exercise window for stock options.
- Unlimited paid time off with encouragement to use it.
- At least 12 weeks of fully paid parental leave, subject to local requirements.
- Generous equipment, software, and office furniture budget.
- $100 per month education budget, with more expensive items such as conferences covered with manager approval.
- US employees receive fully covered health insurance premiums for themselves and dependents; employees in other countries receive fully covered supplemental health insurance.
- The role includes a recruiter screen, hiring manager call, project deep dive, founder screening, take-home and practical assessment, and cross-functional interview.
Tech Stack
Categories
About Ashby
Ashby builds an all-in-one recruiting platform—applicant tracking, scheduling, sourcing, and analytics—for talent acquisition teams at scaling companies. It sells the software as a SaaS subscription with integrations across common HR systems. Founded in 2018 and headquartered in San Francisco, the privately held company lists customers such as Snowflake, Reddit, Notion, and Deel.
