Senior / Staff DevSecOps Engineer

📋 Description

• Own runtime security and vulnerability management across cloud and container environments
• Design and enforce identity and access management (IAM) across AWS and internal systems —
• Own secrets and credentials management: policies, tooling, rotation, and developer workflows.
• Lead security incident response: detection, containment, root cause analysis, and durable
• Manage AWS Organization structure, account boundaries, SCPs, and guardrails.
• Harden and maintain CI/CD pipelines, embedding security scanning and policy enforcement into the

🎯 Requirements

• 8+ years in DevSecOps, platform security, or a closely related security engineering role.
• Deep hands-on experience with AWS — IAM, SCPs, Organizations, security services (GuardDuty
• Strong IaC experience with Terraform; you've used it to enforce security controls, not just
• Experience owning secrets management end-to-end in a production engineering environment.
• Proven track record designing and hardening CI/CD pipelines (we use GitHub Actions).
• Hands-on experience with container security, including image scanning and runtime controls.

🎁 Benefits

• Medical, dental, and vision plan options. Life / AD&D, disability coverage options.
• Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for
• Paid holidays and flexible PTO. Take what you need.
• 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.