Senior DevSecOps Engineer

Quick Facts

• Role: Senior DevSecOps Engineer

Description

Secure cloud infrastructure with a focus on Kubernetes by managing Cloud Security Posture and hardening cloud-native environments. Own parts of WAF operations, support security incident response, and conduct infrastructure security audits. Help AppSec teams secure CI/CD pipelines and build security tooling for an internal developer platform.

Responsibilities

• Manage Cloud Security Posture using CNAPP/CSPM tools (e.g., Wiz) and monitor security across cloud-native environments

• Harden and continuously monitor Kubernetes-based environments

• Manage cloud security configuration with Terraform and CDK

• Configure and manage Web Application Firewalls (e.g., Cloudflare) and maintain WAF rules

• Participate in security incident response

• Run regular infrastructure security audits and remediate security threats

• Manage Just-In-Time (JIT) access and IAM roles across many cloud accounts

• Develop and test security tools for the internal developer platform; support AppSec for CI/CD pipeline security

Benefits

• Base salary, bonus target, and RSUs

• Private medical care, life insurance, and Multisport card

• Access to a mindfulness app (Calm)

• Discounts on partner products and services

• Learning and development opportunities and workshops

• Team events and birthday/work-anniversary gifts

• Award-winning work environment and commitment to diversity, inclusion, and belonging