What You’ll Do:
As a Senior DevSecOps Engineer, you will manage the cloud security implementation for multiple cloud environments to include AWS, Azure, and classified platforms. You will also be responsible for designing, implementing, and maintaining secure software development practices and tools for Slingshot’s software development lifecycle, then educating/mentoring others in the organization. You’ll also help manage and mitigate infrastructure costs and maintain vendor relationships.
Position Responsibilities:
- Executes all position responsibilities in alignment with Slingshot’s core values, mission, and purpose
- Work within Engineering teams to interweave security with the scalability, performance, reliability, and functional requirements to virtualized/cloud computing solutions
- Leverage industry best practices and experience to ensure that security is baked into deliverables from the start and that each product and program fully embrace a DevSecOps and “shift-left on security” mentality
- Develop automated build and test pipeline strategies including aspects of security and compliance to ensure viability of cloud deployment solutions
- Secure and manage cloud-native resource on providers like AWS and Azure through infrastructure-as-code and compliance-as-code
- Administer and support developer and user access to cloud resources
- Leverage observability tools to monitor security metrics for applications virtualized resource
- Participate in Agile software develop and deployment processes
- Provide ongoing support for the services and applications that are critical to our business needs
- Communicate methods, findings, and hypotheses with stakeholder
- Perform other duties as assigned (to be less than 10% of the responsibilities listed above)
Pre-Requisites
- Must be eligible for clearance
Minimum Requirements
- 6+ years of professional experience in a DevSecOps or similar role
- Experience with container security practices within Kubernetes and Helm
- Experience with security configuration of AWS Cloud Native Technologies
- Deep working knowledge of version control (Git) and CI/CD tools (GitHub Actions)
- Experience with infrastructure as code frameworks including Terraform
- Good understanding of networking, routing, firewalls, VPN, SSL
- Knowledge of programming/scripting languages (Python, Bash, JavaScript) used in DevSecOps life cycles
- Keen attention to detail and industry best practices pertaining to privacy, security, and compliance
- Experience with security compliance audits/certifications such as SOC 2 Type 2, FedRAMP, CMMC 2.0, ISO 27001
- Skill and comfort working in a rapidly moving startup environment with dynamic objectives and iteration with users
Preferred Skills
- Degree in computer science or related field
- Active TS/SCI clearance
- Experience with asynchronous processing and/or data streaming technologies, such as AWS Kinesis, Kafka, or ZeroMQ, KNative
- Experience with securing data platforms, microservices, distributed systems and deploying into classified cloud environments
- Experience with security audits/certifications such as SOC 2 Type 2, FedRAMP, CMMC 2.0, ISO 27001
- Early-stage data-centric startup experience
*These skills are guidelines, not hard and fast rules. You don’t have to meet every qualification listed- if your skills are transferable and you meet the minimum requirements, we encourage you to apply.
Location: Remote, United States
Type: Full Time
Salary: $155,000 - $190,000
US-based Candidates: we are currently only able to hire residents of the following U.S. states: AZ, CA, CO, DC, FL, GA, HI, IL, IN, KS, MD, MA, MI, MN, MO, MT, NV, NJ, NM, NY, NC, OR, RI, TN, TX, UT, VT, VA, WA, WV, and WI. We are unable to consider candidates residing in other U.S. states at this time.
Internationally-based Candidates: we are currently only able to hire residents of the following locations: United Kingdom. We are unable to consider candidates residing in other countries at this time.
Equity, Diversity & Inclusion are key to our success. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences, and backgrounds, who share a passion for creating a safer, more connected world. Diversity not only includes race and gender identity, but also national origin, citizenship, sex, color, veteran status, disability, genetic information, or any other protected characteristic that is part of one’s identity. All of our employees’ points of view are key to our success, and we embrace individuality.
Top Skills
Similar Jobs
What you need to know about the San Francisco Tech Scene
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
