2 days ago
Remote, EMEA or United Kingdom (city not specified)Senior
Responsibilities
- Deploy, configure, integrate, tune, and operate static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows.
- Inventory production repositories and delivery paths, including prompts and model configuration, and establish reliable coverage and ownership for delivery checks.
- Implement report-only, warning, blocking, and self-service exception policies with documented ownership, justification, expiry, and audit trails.
- Build automation and AI-assisted workflows that enrich findings, propose fixes, and support product-engineering triage while preserving required checks, review, and rollback.
- Measure coverage, integration failures, finding age, triage and remediation times, false blocks, build delay, bypasses, and GRC evidence.
- Work with Infrastructure on cloud-posture monitoring, critical-misconfiguration alerts, bounded remediation automation, shared-image hardening, and artifact provenance.
- Deliver an initial bounded scanning integration and establish baseline metrics during the first three months.
Requirements
- Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
- Ability to write maintainable production automation in TypeScript, Python, Go, or a comparable language.
- Experience with GitHub Actions or comparable systems, Terraform, containers, cloud controls, and security-delivery tooling is relevant.
- Ability to explain failure modes, use security evidence for rollout decisions, and own reliability, tuning, integrations, and adoption after launch.
- Experience with supply-chain security and scanners is useful but individual tools can be learned on the job.
- Experience applying AI in engineering and evaluating its outputs, permissions, checks, and rollback requirements.
- Comfort investigating ambiguous problems, writing proposals, making build-versus-buy decisions, and working with cross-functional partners.
Benefits
- Competitive salary and equity.
- 10-year stock-option exercise window.
- Unlimited paid time off with encouragement to use it.
- At least 12 weeks of fully paid parental leave, subject to potentially higher local requirements.
- Generous equipment, software, and office-furniture budget.
- $100 per month education budget, with more expensive items such as conferences covered with manager approval.
- US employees receive health insurance for themselves and dependents with 100% of premiums covered; employees in other countries receive fully covered supplemental health insurance.
About Ashby
Ashby builds an all-in-one recruiting platform—applicant tracking, scheduling, sourcing, and analytics—for talent acquisition teams at scaling companies. It sells the software as a SaaS subscription with integrations across common HR systems. Founded in 2018 and headquartered in San Francisco, the privately held company lists customers such as Snowflake, Reddit, Notion, and Deel.