DevSecOps Engineer at Casa

THE ROLE

Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Head of Security and play a crucial role in overseeing our security architecture and culture. It will also be a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.

The successful candidate has experience developing scalable security controls and approaches in accordance with industry standards.

The salary range for this role is $121,500-$148,500

WHAT YOU'LL DO:

• Manage and respond to internal security requests
• Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles
• Onboarding & offboarding of employees to internal systems
• Oversee employee laptop MDM system and alerts
• Security review and assessment of new technologies including tools, code frameworks, third-party providers, and internal applications
• Help establish and refine best practices for security in our organization
• Triage, prioritize, and help resolve vulnerabilities reported by penetration testing, static analysis tools, responsible disclosures, and automated alerts
• Update and enhance security documentation and training materials
• Assist with automating our security processes and alerts
• Participate in a shared on-call schedule for critical production security issues
• Stay abreast of the latest security events and trends
• Participate in regular security training and certification acquisition

WHO YOU ARE:

• You have security certifications or equivalent experience
• You have a hacker mindset and can think like an adversarial attacker
• A deep understanding and background in multiple facets of security
• Experience implementing security in Linux-based infrastructures, cloud-based solutions (AWS) and different code frameworks including JavaScript, Terraform and Python
• Experience with open-source implementations, cloud environments, and multiple operating systems
• Experience building scalable security solutions
• Experience with one or more of the following - penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning
• Strong communication skills and the ability to present findings to both technical and non-technical audiences
• Traits we look for in all candidates: exceptional organization, a high level of empathy, strong attention to detail, transparency, collaborative nature, and above-and-beyond personal integrity
• Nice to have experience or interest in cryptocurrency/ cryptography