DevSecOps Engineer

Role Overview

We are looking for a DevSecOps Engineer to join our product engineering team. The role sits inside engineering and works closely with developers and information security day to day. The team is experienced and moves quickly, and the right person for this role is comfortable operating as a peer to strong engineers, contributing practical security judgment and ensuring overall security of our solutions.

What You Will Do

Key responsibilities include serving as the primary security resource for engineering teams, conducting lightweight threat modeling, leading collaboration between engineering and information security teams, and defining and maintaining a tiered security standard.

Why It Might Be a Fit

The ideal candidate brings the depth to identify serious security issues, the engineering credibility to help teams fix them at scale, and the pragmatism to distinguish real risk from noise in a SaaS-native, developer-first environment.

Requirements

• 7+ years in application security, secure software development, or a closely related discipline
• Demonstrated ability to operate as an embedded security partner within engineering
• Deep, hands-on experience with GitHub Advanced Security or equivalent security tooling
• Experience with threat modeling methodologies (STRIDE, PASTA, or similar) applied to real-world systems
• Proficiency in Python and/or Go, comfortable reading, writing, and reviewing production-grade code
• Strong command of OWASP Top 10, common vulnerability classes, and secure design principles
• Experience securing SaaS or product engineering workloads rather than enterprise IT or perimeter-focused environments
• Experience securing workloads on Cloudflare (WAF, Access, Zero Trust, Workers) and Microsoft Azure (IAM, Managed Identities, Key Vault, Defender)
• Solid understanding of container security concepts with hands-on Docker experience
• Excellent communication skills, with the ability to translate complex security risk into developer-actionable guidance and executive-level business context

Benefits

• Competitive salary
• Equity
• Growth and learning initiatives
• Employee benefits
• Company innovation
• Diverse candidate backgrounds and perspectives
• Inclusive hiring practices
• Career paths for many different role types
• Fulfilling career paths for all contributors