Senior Security Engineer - DevSecOps

📋 Description

• Manage and maintain edge and bot protection (WAF, CDN, DDoS mitigation).
• Perform security-focused infra reviews for new product releases and changes.
• Implement and maintain monitoring/alerting for cloud and container vulnerabilities.
• Collaborate with DevOps to embed security into CI/CD pipelines and deployments.
• Partner with App Security and Engineering to apply threat-modeling security controls.
• Lead IaC security and runtime protection initiatives to automate controls.
• Assist with threat modeling, risk assessments, and security guidance.
• Collaborate with incident response teams to resolve cloud security incidents quickly.
• Develop tooling to support proactive remediation and security validation.
• Track and report DevSecOps KPIs (MTTR, coverage, trends).

🎯 Requirements

• 5+ years in DevSecOps, Security Engineering, or similar roles.
• Experience with cloud platforms (GCP/AWS/Azure) and container orchestration (Kubernetes/ECS).
• Experience with cloud and container security tooling.
• Strong WAFs, bot mitigation, API gateways, and CDN security knowledge.
• Proven experience performing secure design and architecture reviews.
• Proficiency with IaC tools (Terraform, OpenTofu, Helm) and security scanners.

🎁 Benefits

• Company-subsidized medical, dental, and vision plans
• 401(k) plan with company match
• Annual bonus
• Flexible PTO to encourage healthy work/life balance
• Generous paid leave programs, including 16-week parental leave
• Workplace flexibility and modern work schedules focused on getting the job done