Role Description
As the Staff DevSecOps Engineer, you will be the technical owner of how security is built into Trase's software development lifecycle and cloud operations.
-
Integrate automated security testing, continuous vulnerability management, and secure coding practices into existing CI/CD pipelines.
-
Own the implementation of Trase's dedicated security architecture, delivering shift-left tooling (SAST, DAST, SCA, secrets scanning, and IaC scanning).
-
Standardize and operate secure pipelines to empower software engineers to focus on high-velocity delivery while maintaining necessary controls.
Responsibilities
-
Shift-Left Security in CI/CD:
-
Design, implement, and operate the shift-left security toolchain across CI/CD pipelines.
-
Define how findings are triaged, routed, and remediated; partner with engineering teams.
-
Establish and enforce policy-as-code and pre-merge security gates calibrated to risk.
-
Cloud Security Architecture:
-
Design and deploy production cloud security architecture, focusing on Google Cloud Platform (GCP).
-
Implement foundational controls including network segmentation, workload identity, secrets management, and encryption.
-
Operate cloud security posture management (CSPM) and cloud workload protection capabilities.
-
Infrastructure-as-Code & Platform Security:
-
Build, codify, and maintain secure-by-default infrastructure modules in Terraform.
-
Embed security controls directly into platform abstractions.
-
Drive secure baselines for Kubernetes, container runtimes, and serverless workloads.
-
Detection, Monitoring & SIEM:
-
Operate and fine-tune Trase's SIEM and security telemetry pipeline.
-
Define detection-as-code practices and tune detections.
-
Build dashboards and reporting for real-time visibility into the environment.
-
Incident Response:
-
Enhance and lead aspects of Trase's technical security incident response capability.
-
Serve as a senior responder during security events.
-
Vulnerability & Threat Management:
-
Operate the end-to-end vulnerability management lifecycle across application, container, and cloud surface area.
-
Facilitate remediation SLAs and report on progress to leadership.
-
Cross-Functional Partnership:
-
Partner closely with Engineering and the broader Security and Compliance team.
-
Embed with Product and Engineering teams to ensure security is integral to Trase's builds.
-
Mentorship & Engineering Leadership:
-
Mentor junior Security and Compliance engineers and members of the Engineering team.
-
Establish and propagate patterns, runbooks, and reusable building blocks.
Qualifications
-
10+ years of experience in security engineering, DevSecOps, cloud security, or platform security roles.
-
Deep, hands-on experience securing modern CI/CD pipelines.
-
Strong cloud security expertise, primarily in Google Cloud Platform.
-
Expert-level Terraform skills with a track record of building secure-by-default IaC modules.
-
Demonstrated experience operating a SIEM end-to-end.
-
Hands-on incident response leadership experience.
-
Practical experience in environments governed by SOC 2, HIPAA, and ISO 27001.
-
Strong programming or scripting skills (Python, Go, or similar).
-
Excellent partnership skills and a developer-empathetic mindset.
-
Strong affinity for working with LLMs and AI agents.
-
US Citizen and eligible for US security clearance.
Nice to Have
-
Hands-on experience implementing security architectures for FedRAMP, DoD RMF, HITRUST, or other heavily regulated frameworks.
-
Active US security clearance (Secret, TS, or TS/SCI).
-
Deep Kubernetes and container security expertise.
-
Experience securing AI/ML workloads.
-
Industry certifications such as Google Professional Cloud Security Engineer, AWS Security Specialty, OSCP, GIAC, or CKS.
-
Open source contributions to security tooling, detection content, or IaC modules.
Salary Range
$170,000-245,000. This represents the typical salary range for this position based on experience, skills, and other factors.
Benefits
-
Career track opportunity with potential for rapid advancement.
-
100% employer paid, comprehensive health care including medical, dental, and vision for you and your family.
-
Paid maternity and paternity for 14 weeks at employees' normal pay.
-
Unlimited PTO, with management approval.
-
Opportunities for professional development and continued learning.
-
Optional 401K, FSA, and equity incentives available.
-
Mental health benefits available through Tara Mind.
