178K–250K USD / year
Senior DevSecOps Engineer
DevOpsRemote — United States, Canada
Published on 2026-11-13
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Build and operate secure-by-default delivery workflows across application code, infrastructure, dependencies, containers, and product configuration. The role focuses on reliable security tooling and controls that help engineers act on findings while keeping delivery friction low.
About the company
Ashby is a technology company that provides a recruitment platform designed to streamline the hiring process for businesses. They serve various sectors with a focus on enhancing talent acquisition and management through innovative engineering and support solutions.
The team
Security team, reporting to the Head of Security.
Stack
GitHub ActionsTerraformTypeScriptPythonGoCI/CDContainers
What you'll do
- Integrate and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD.
- Establish warn, block, and self-service exception policies with documented ownership, justification, expiry, and audit trails.
- Build automation and AI-assisted workflows to enrich findings and propose fixes while preserving review and rollback controls.
- Track security coverage, finding remediation, false blocks, build delays, integration failures, and bypasses.
- Coordinate with Infrastructure on cloud-posture monitoring and bounded remediation automation.
What we're looking for
- Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
- Ability to write and maintain production automation in TypeScript, Python, Go, or a comparable language.
- Experience applying AI in engineering and checking its outputs and permissions.
- Comfort investigating ambiguous problems, proposing solutions, and operating and improving shipped tools.
Nice to have
- Experience with supply-chain security and security scanning tools.
- Experience with GitHub Actions or comparable CI/CD systems, Terraform, containers, and cloud controls.
Benefits
- Competitive salary and equity.
- 10-year stock-option exercise window.
- Unlimited PTO.
- At least 12 weeks of fully paid parental leave.
- Equipment, software, and office furniture budget.
- $100 monthly education budget, with conference funding subject to manager approval.
- Health insurance premiums fully covered for employees and dependents.
Hiring process
- Recruiter screen (30 minutes)
- Hiring manager introduction (20 minutes)
- Past projects deep dive (45 minutes)
- Founder screening (45 minutes)
- Take-home assessment and practical assessment review (1 hour review; 2–3 hours for take-home)
- Cross-functional stakeholder interview (45 minutes)