2 days ago
Remote, United States or Remote, CanadaSenior
Base Salary
$178k - $250k/yr
Responsibilities
- Deploy, configure, integrate, tune, and operate security scanning and delivery-security controls across production repositories and CI/CD workflows.
- Implement secure-by-default report-only, warning, blocking, and self-service exception policies with appropriate ownership, justification, expiry, and audit trails.
- Build automation and AI-assisted workflows that enrich findings, propose fixes, and support engineering triage while preserving review, required checks, and rollback.
- Measure delivery-security coverage, integration failures, finding age, remediation times, false blocks, build delay, bypasses, and GRC evidence.
- Partner with Infrastructure on cloud-posture monitoring, critical-misconfiguration alerts, bounded remediation automation, shared-image hardening, and artifact provenance.
Requirements
- Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
- Ability to write maintainable production automation in TypeScript, Python, Go, or a comparable language.
- Experience with GitHub Actions or comparable CI/CD systems, Terraform, containers, and cloud controls.
- Ability to explain system failure modes, use security evidence for rollout decisions, and own the reliability and tuning of shipped capabilities.
- Experience applying AI in engineering, including checking outputs and permissions, is expected.
- Supply-chain security and scanner experience is useful, but familiarity with a particular scanner is not required.
- Comfort investigating ambiguous problems, writing proposals, making build-versus-buy decisions, and improving adoption after launch.
Benefits
- Competitive salary and equity.
- 10-year exercise window for stock options.
- Unlimited paid time off with encouragement to take it.
- At least 12 weeks of fully paid parental leave, subject to possible increases for local requirements.
- Generous equipment, software, and office furniture budget.
- $100 per month education budget, with more expensive items such as conferences covered with manager approval.
- For US employees, health insurance premiums for employees and dependents are fully covered; employees in other countries receive fully covered supplemental health insurance.
- The role includes a take-home assignment and practical assessment during the interview process, with an estimated 2–3 hours for the take-home assignment.
About Ashby
Ashby builds an all-in-one recruiting platform—applicant tracking, scheduling, sourcing, and analytics—for talent acquisition teams at scaling companies. It sells the software as a SaaS subscription with integrations across common HR systems. Founded in 2018 and headquartered in San Francisco, the privately held company lists customers such as Snowflake, Reddit, Notion, and Deel.