Senior Engineer, DevSecOps
Notability5 days ago
Base Salary
$185k - $243k/yr
Responsibilities
- Design, implement, and maintain GCP cloud infrastructure.
- Build and optimize CI/CD pipelines for automated testing and deployment.
- Implement network security controls such as firewalls, VPNs, and segmentation.
- Monitor systems for security threats and respond to incidents.
- Manage Kubernetes and Docker container orchestration.
- Automate infrastructure provisioning with Terraform.
- Conduct security audits and remediate vulnerabilities.
- Implement logging, metrics, tracing, and alerting solutions.
- Collaborate with development teams on secure architecture decisions.
- Optimize cloud costs and resource utilization.
- Maintain disaster recovery and backup strategies.
- Perform vulnerability management and threat hunting.
Requirements
- 5+ years of experience in DevSecOps, SRE, or infrastructure engineering.
- Strong understanding of networking, including TCP/IP, DNS, load balancing, and CDNs.
- Experience with WAFs, CNAPP, IDS/IPS, SIEM, and SOAR security tools.
- Extensive knowledge of secure practices for cloud-based infrastructure.
- Proficiency in Python, Bash, and Go scripting.
- Experience with infrastructure as code, automation, scalable security practices, and modern application stacks.
- Broad security knowledge, offensive-security perspective, and experience reducing threat surfaces.
- Experience with SOC 2, ISO27001, HIPAA, or PCI-DSS compliance frameworks.
- Proficiency with Prometheus, Grafana, and PagerDuty.
- Knowledge of secrets management and identity/access management.
- Strong communication skills.
- Experience with zero-trust architecture is a bonus.
- Experience with TypeScript and SQL is a bonus.
- Security certifications such as CISSP, CEH, or AWS Security Specialty are a bonus.
- Background in penetration testing or vulnerability assessment is a bonus.
Benefits
- Base pay targeted at $185,000-$243,000, plus bonuses and profit sharing.
- Equity awards in the form of stock options.
- Fully covered medical, dental, and vision healthcare for the employee and family.
- Flexible work and vacation schedules.
- 401k with matching contributions.
- Matching gifts to nonprofits.
- Lunch stipend when working from headquarters.
- Public transit stipend.
- Home workstation reimbursement.
- ISP stipend and monthly phone bill stipend.
- Hybrid work model with at least two days onsite per week at the downtown San Francisco office and remote flexibility the rest of the week.
Tech Stack