2 days ago
Remote, United States or Remote, CanadaSenior
Base Salary
$178k - $250k/yr
Responsibilities
- Deploy, configure, integrate, tune, and operate static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows.
- Inventory production repositories and delivery paths, including prompts and model configuration, and establish clear scanner coverage and ownership.
- Implement report-only, warn, block, and self-service exception policies with appropriate documentation, expiry, audit trails, and escalation paths.
- Build automation and AI-assisted workflows that enrich findings, propose fixes, and support engineering triage while preserving required checks, review, and rollback.
- Measure coverage, integration failures, finding age, triage and remediation times, false blocks, build delay, and bypasses, and connect useful telemetry to GRC evidence.
- Partner with Infrastructure on cloud-posture monitoring and bounded remediation automation, and extend shared-image hardening and artifact provenance.
- Deliver an initial scanning integration, establish rollout rules, baseline performance, and improve adoption and reliability after launch.
Requirements
- Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
- Ability to write maintainable production automation and explain the failure modes of shipped systems.
- Experience with GitHub Actions or comparable systems, Terraform, containers, and cloud controls is relevant.
- Comfort writing production automation in TypeScript, Python, Go, or a comparable language.
- Ability to use security evidence to make practical rollout decisions and work with ambiguous problems.
- Experience applying AI in engineering and evaluating its outputs and permissions.
- Supply-chain and scanner experience is useful, but familiarity with a particular scanner is not required.
- Willingness to own reliability, tuning, integrations, adoption, and ongoing operation rather than handing off prototypes.
- Ability to collaborate with Product Engineering, Application Security, Infrastructure, and Security leadership.
Benefits
- Competitive salary and equity.
- 10-year exercise window for stock options.
- Unlimited paid time off with encouragement to use it.
- At least 12 weeks of fully paid parental leave, with additional time where required locally.
- Generous equipment, software, and office furniture budget.
- $100 per month education budget, with more expensive items such as conferences covered with manager approval.
- US employees receive fully covered health insurance premiums for themselves and dependents; employees elsewhere receive fully covered supplemental health insurance.
- Interview process includes recruiter, hiring manager, project deep dive, founder, take-home and practical assessment, and cross-functional interviews.
Tech Stack
Categories
About Ashby
Ashby builds an all-in-one recruiting platform—applicant tracking, scheduling, sourcing, and analytics—for talent acquisition teams at scaling companies. It sells the software as a SaaS subscription with integrations across common HR systems. Founded in 2018 and headquartered in San Francisco, the privately held company lists customers such as Snowflake, Reddit, Notion, and Deel.