Staff DevSecOps Engineer

SimpliSafe • Boston, MA

8d • Hybrid

About The Position

The Staff DevSecOps Engineer advances security across SimpliSafe’s product lifecycle, including backend services and AWS cloud platforms. The role applies security-by-design principles by integrating automated security testing, infrastructure security controls, vulnerability management, and cloud governance into engineering workflows. Working closely with Security, Engineering, and IT teams, the engineer designs and implements resilient security architectures, secure CI/CD pipelines, and cloud-native protections that support secure, scalable, and compliant product delivery.

Requirements

• 5+ years of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience.
• Strong hands-on experience implementing DevSecOps practices and security controls across enterprise environments.
• Expertise in CI/CD pipeline architecture, automation, and secure software delivery.
• Experience with cloud platforms such as AWS or Google Cloud Platform.
• Strong knowledge of Infrastructure as Code tools.
• Experience with Docker, Kubernetes, container orchestration, and container security.
• Strong understanding of IAM, RBAC, secrets management, encryption, certificates, and network security.
• Knowledge of security frameworks and compliance standards such as NIST, CIS Benchmarks, and OWASP.
• Experience with scripting and automation languages.
• Strong troubleshooting, analytical, communication, and stakeholder management skills.

Nice To Haves

• Certifications in cloud security or related fields.
• Experience with additional cloud platforms or tools.
• Knowledge of additional security tools and practices.

Responsibilities

• Design and implement DevSecOps practices and security controls across enterprise environments.
• Architect and maintain CI/CD pipelines for secure software delivery.
• Use cloud platforms such as AWS and Google Cloud Platform to optimize infrastructure.
• Work with Docker, Kubernetes, and container orchestration for secure deployment.
• Automate tasks using scripting languages such as Python, Bash, PowerShell, or similar tools.
• Lead vulnerability management initiatives by identifying, prioritizing, and remediating cloud, application, container, and infrastructure vulnerabilities through scalable automation.
• Develop detection engineering capabilities, including security monitoring, alerting, threat detection, and incident response workflows across cloud environments.
• Implement cloud security posture management (CSPM), continuous control monitoring, and automated remediation strategies.
• Partner with engineering teams to conduct architecture reviews and security design assessments for new products and services.
• Drive adoption of security best practices through technical leadership and organization-wide enablement programs.

Benefits

• Comprehensive total rewards package supporting wellness and providing security for employees and their families.
• Free SimpliSafe system and professional monitoring for the employee’s home.
• Employee Resource Groups offering networking, mentoring, development, and advocacy opportunities.
• Potential participation in an annual bonus program, equity, and other forms of compensation.
• Medical, retirement, and lifestyle benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed