3 hours ago
Base Salary
$188k - $242k/yr
Responsibilities
- Own security automation across GitHub Actions CI/CD pipelines, including SAST, SCA, secrets detection, and container scanning.
- Build secure golden-path templates for Go, Rails, and Vue.js services.
- Harden the software supply chain through dependency management, artifact signing, SBOM generation, and provenance tracking.
- Implement Terraform infrastructure-as-code scanning and Kubernetes policy-as-code enforcement.
- Coordinate vulnerability remediation across engineering, including application vulnerabilities, infrastructure changes, and patching.
- Build automation to route, deduplicate, contextualize, and track vulnerability findings.
- Own secrets-management patterns and help replace long-lived credentials with short-lived federated identity.
- Partner with Security on AWS cloud-security posture and Platform telemetry for Detection & Response.
- Support agentic penetration testing and build automated remediation for vulnerability findings.
- Roll out AI-assisted security review of code changes with controls for signal quality and false positives.
- Drive secure-development adoption through documentation, developer education, and advocacy.
- Measure remediation time, scan coverage, secrets findings, and mean time to patch.
Requirements
- 5+ years of professional experience in software engineering, infrastructure, or security engineering.
- 3+ years focused on application security, security automation, or DevSecOps.
- Hands-on experience integrating SAST, SCA, secrets detection, and container-scanning tools into CI/CD pipelines; GitHub Actions is strongly preferred.
- Proficiency with AWS security services including IAM, GuardDuty, Security Hub, and CloudTrail, with the ability to design least-privilege access.
- Experience with Kubernetes and infrastructure-as-code, preferably Terraform, including policy-as-code enforcement.
- Proficiency in at least one programming language, with Go, Python, or Ruby preferred.
- Demonstrated ability to reduce security friction and drive voluntary adoption of security controls by engineering teams.
- Strong written communication and documentation skills.
Benefits
- Welcoming and casual work environment.
- Great benefits and wellness program offerings.
- Company retreats.
- Opportunities to interact with and learn from leaders in the startup community.
Tech Stack
About Justworks
Justworks provides a PEO and SaaS platform for small and midsize businesses to run payroll, offer benefits, and manage HR and compliance. Products include access to health insurance and 401(k), payroll and contractor payments, onboarding tools, and reporting, sold via subscriptions and PEO service fees. Founded in 2012 and headquartered in New York City, the company is privately held and serves employers across the United States.