DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage internal security requests, ensuring employees receive the necessary tools and access without excessive provisioning.

• Guarantee that employees have access to essential tools and systems while adhering to least privilege access principles.

• Facilitate the onboarding and offboarding of employees across internal systems.

• Supervise our Mobile Device Management (MDM) system and respond promptly to alerts.

• Evaluate and analyze new technologies (such as tools, code frameworks, third-party providers, and internal applications) from a security perspective.

• Contribute to the development and enhancement of security best practices throughout the organization.

• Assess and address vulnerabilities identified through penetration testing, static analysis, responsible disclosures, and automated alerts.

• Maintain up-to-date security documentation and training materials to ensure they are relevant and effective.

• Automate security processes and alerts wherever possible for increased efficiency.

• Engage in a shared on-call rotation to address critical production security issues.

• Keep informed about the latest security events and trends in the industry.

• Participate in regular security training and pursue certification opportunities.

• Ensure the security of our software development lifecycle while adapting its processes as needed.

• Utilize infrastructure-as-code to automate deployment and management through tools like Terraform, Ansible, or similar technologies.

• Stay updated on emerging threats, security trends, and developments across our technology stack and the industry.

• Investigate and resolve infrastructure incidents to ensure smooth operations.

⛳️ Requirements

• Possess security certifications or have equivalent practical experience in the field.

• Approach problems with an attacker's mindset, demonstrating a genuine hacker mentality.

• Extensive background in various aspects of security.

• Over 5 years of experience implementing security measures in Linux-based infrastructures, AWS, and code environments.

• Proficient with open-source tools, cloud environments, and various operating systems.

• Proven experience in developing scalable security solutions.

• Hands-on experience with one or more of the following: penetration testing, threat modeling, code analysis, system hardening, distributed patching, or vulnerability scanning.

• Familiarity with hardening AI tools to mitigate security incidents.

• Strong communication skills, able to convey findings effectively to both technical and non-technical audiences.

• Bonus points for experience or a genuine interest in cryptocurrency and cryptography.

🏝️ Benefits

• Health Benefits: Medical coverage is provided, along with FSA options, dental, vision, and access to mental health professionals.

• Setup for Remote Success: Our decentralized team is effective, and we reimburse up to $400 for home office setup expenses.

• Maternity/Paternity Leave: Enjoy 12 weeks of maternity leave and 4 weeks of paternity leave.

• Rest and Relaxation: We value personal time and offer flexible time off. We encourage taking at least 3 weeks off each year.

• Ownership: With private key management, you can truly own your future. At Casa, everyone plays a role, and we provide equity opportunities for our employees to share in our collective success.

• Community: Inclusivity is essential to us. We appreciate each other and our contributions. Our team, known as the Casa Space Fleet, fosters a supportive and enjoyable environment.

• Investment Avenues: We collaborate with resources that allow you to invest a portion of your paycheck in Bitcoin, in addition to offering a traditional 401(k) option.