Staff Security Engineer, DevSecOps
RemoteUnited States or Canada
Job Summary
Drive secure-by-default patterns across the organization through reusable libraries, templates, guardrails, and paved-road workflows. Lead practical threat modeling for new product capabilities and translate findings into clear engineering actions. Design and operate security automation tooling for identity management, secrets handling, and policy enforcement while hardening AWS environments and CI/CD pipelines. Build detection and alerting for security events across endpoints, cloud infrastructure, and application logs. Own hands-on incident response, including triage, containment, and root cause analysis, while participating in on-call rotations for high-severity security and platform incidents. Partner with engineering teams to review architecture and reduce exploitable risk through pragmatic, code-based controls.
Required Qualifications
- Bachelor's degree in Computer Science, Engineering, or equivalent practical experience
- 8+ years of experience across software engineering, infrastructure engineering, platform engineering, SRE, DevOps, security engineering, or related roles in production SaaS environments
- 3+ years of hands-on experience in security engineering, platform security, cloud security, or related security-focused roles
- Strong hands-on experience securing cloud-native environments on AWS
- Proven ability to write code for automation, integrations, internal tooling, and operational workflows using languages such as Python, Go, JavaScript, or Bash
- Experience operating in a DevSecOps or platform-adjacent model where security is embedded into delivery pipelines and engineering workflows
- Strong experience with identity and access management, secrets handling, key management, logging, auditability, and least-privilege design
- Experience building or operating security controls for CI/CD, infrastructure as code, containerized systems, and developer platforms
- Practical experience with security monitoring, detection engineering, alert tuning, and incident response
- Demonstrated ability to use AI-assisted development tools to accelerate investigations, automate repetitive work, and improve engineering effectiveness while maintaining strong judgment
- Comfortable working in a fast-paced startup environment with a small, high-impact team
- Excellent communication and collaboration skills, able to explain trade-offs clearly and drive consensus without becoming a bottleneck
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.