SecOps Developer

TextNow•San Francisco, CA

About The Position

TextNow is looking for a new SecOps team member to secure, monitor, and enable automated response within our infrastructure. Join us in our mission to break down barriers to communication and free the flow of conversation for people everywhere.

Requirements

5+ years of experience in Security Operations, Site Reliability Engineering, or DevSecOps, with a strong understanding of cloud security, system reliability, and automation.
Proficient with AWS security services, GitHub security controls, Terraform for secure infrastructure provisioning, and Ansible for automated security configurations.
Experienced in handling security incidents, analyzing threats, and implementing remediation strategies to improve system defenses.
Strong background in logging, monitoring, and anomaly detection using tools like SIEMs, intrusion detection systems (IDS), and cloud-native security solutions.
Experience working with development teams to integrate security best practices into the SDLC (e.g., static and dynamic code analysis).
Passionate about working with engineering teams to embed security into CI/CD pipelines, enforce security policies, threat modeling, and risk assessments, and drive a security-first mindset across the organization.

Responsibilities

Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability.
Develop and enforce best practices using Terraform, Ansible, Crowdstrike, and AWS security tools, ensuring secure configurations, automated compliance checks, and infrastructure as code.
Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats.
Work closely with engineering teams to remediate security risks.
Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity.
Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems.
Work with DevOps, engineering, and compliance teams to integrate security best practices into the software development lifecycle (SDLC) and promote a security-first culture.
Identify and mitigate security vulnerabilities, conduct security assessments, and implement automated security scanning and hardening techniques.