Staff DevSecOps Engineer
SimpliSafe · Boston, MA
About this role
**About SimpliSafe** We’re a high-tech home security company passionate about protecting the life you’ve built and our mission of keeping *Every Home Secure*. We foster a no-ego culture of collaboration and innovation—where you can grow, thrive, and make a huge impact. We embrace a **hybrid work model**: teams come together in our state-of-the-art office on **two core days** (typically Tuesday, Wednesday, or Thursday). For the remainder of the week, you choose where you work. **Why are we hiring?** We’re growing and thriving—so we’re looking for smart, talented, and humble people who share our values to help disrupt the home security space and relentlessly pursue our mission. --- **About the Job (Staff DevSecOps Engineer)** The Staff DevSecOps Engineer advances security across the product lifecycle—spanning backend services and **AWS cloud platforms**. This role drives **security-by-design** by integrating automated security testing, infrastructure security controls, vulnerability management, and cloud governance into engineering workflows. You’ll work closely with **Security, Engineering, and IT** to design and implement resilient security architectures, secure **CI/CD pipelines**, and cloud-native protections that enable secure, scalable, and compliant product delivery. --- **Primary Responsibilities Include** - Design and implement DevSecOps practices and security controls across enterprise environments. - Architect and maintain CI/CD pipelines for secure software delivery. - Use cloud platforms such as **AWS** and **Google Cloud Platform** to optimize infrastructure. - Work with **Docker**, **Kubernetes**, and container orchestration for secure deployment. - Automate tasks using scripting languages such as **Python, Bash, PowerShell**, or similar tools. - Lead vulnerability management: identify, prioritize, and remediate cloud, application, container, and infrastructure vulnerabilities via scalable automation. - Develop detection engineering capabilities, including security monitoring, alerting, threat detection, and incident response workflows. - Implement **CSPM** (Cloud Security Posture Management), continuous control monitoring, and automated remediation strategies. - Partner with engineering teams on architecture reviews and security design assessments for new products/services. - Drive adoption of security best practices through technical leadership and organization-wide enablement. --- **What You’ll Bring** - **5+ years** of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience. - Hands-on experience implementing DevSecOps practices and security controls across enterprise environments. - Expertise in CI/CD pipeline architecture, automation, and secure software delivery. - Experience with **AWS** and/or **Google Cloud Platform**. - Strong knowledge of **Infrastructure as Code** tools. - Experience with **Docker**, **Kubernetes**, container orchestration, and container security. - Strong understanding of **IAM, RBAC, secrets management, encryption, certificates, and network security**. - Knowledge of security frameworks and compliance standards such as **NIST, CIS Benchmarks, and OWASP**. - Experience with scripting and automation languages. - Strong troubleshooting, analytical, communication, and stakeholder management skills. **Preferred Skills** - Certifications in cloud security (or related fields). - Experience with additional cloud platforms or too
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.