Staff DevSecOps Engineer

SimpliSafe • Boston, MA

9d • $135,900 - $181,200 • Hybrid

About The Position

The Staff DevSecOps Engineer advances security across the product lifecycle, including backend services and AWS cloud platforms. The role implements security-by-design principles by integrating automated security testing, infrastructure security controls, vulnerability management, and cloud governance into engineering workflows.

Working with Security, Engineering, and IT teams, the engineer designs and implements resilient security architectures, secure CI/CD pipelines, and cloud-native protections to support secure, scalable, and compliant product delivery.

Requirements

• At least 5 years of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience.
• Strong hands-on experience implementing DevSecOps practices and security controls across enterprise environments.
• Expertise in CI/CD pipeline architecture, automation, and secure software delivery.
• Experience with cloud platforms such as AWS or Google Cloud Platform.
• Strong knowledge of Infrastructure as Code tools.
• Experience with Docker, Kubernetes, container orchestration, and container security.
• Strong understanding of IAM, RBAC, secrets management, encryption, certificates, and network security.
• Knowledge of security frameworks and compliance standards such as NIST, CIS Benchmarks, and OWASP.
• Experience with scripting and automation languages.
• Strong troubleshooting, analytical, communication, and stakeholder management skills.

Nice To Haves

• Certifications in cloud security or related fields.
• Experience with additional cloud platforms or tools.
• Knowledge of additional security tools and practices.

Responsibilities

• Design and implement DevSecOps practices and security controls across enterprise environments.
• Architect and maintain CI/CD pipelines for secure software delivery.
• Use cloud platforms such as AWS and Google Cloud Platform to optimize infrastructure.
• Use Docker, Kubernetes, and container orchestration for secure deployment.
• Automate tasks using scripting languages such as Python, Bash, PowerShell, or similar tools.
• Lead vulnerability management initiatives by identifying, prioritizing, and remediating cloud, application, container, and infrastructure vulnerabilities through scalable automation.
• Develop detection engineering capabilities, including security monitoring, alerting, threat detection, and incident response workflows across cloud environments.
• Implement cloud security posture management (CSPM), continuous control monitoring, and automated remediation strategies.
• Partner with engineering teams on architecture reviews and security design assessments for new products and services.
• Drive adoption of security best practices through technical leadership and organization-wide enablement programs.

Benefits

• Comprehensive total rewards package supporting wellness and providing security for employees and their families.
• Free SimpliSafe system and professional monitoring for the employee's home.
• Employee Resource Groups offering networking, mentoring, development, and advocacy opportunities.
• Annual bonus program may be included in the total rewards package.
• Equity may be included in the total rewards package.
• Medical, retirement, and lifestyle benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed