DevSecOps Engineer

November 24

Apply Now

Receive Emails with Similar Jobs

Authentic8

WebsiteLinkedInAll Job Openings

Cybersecurity • Compliance • Government

Authentic8 is a company that specializes in secure browsing and digital investigations through its Silo platform. Silo provides a highly secure, isolated browsing experience that protects users from malware and unauthorized data access while remaining anonymous on the surface, deep, and dark web. The company's products such as Zero Trust Application Access and Risky Web Link Isolation ensure secure and managed access to applications and web content, adhering to strict cybersecurity and compliance standards. They cater to government agencies and commercial enterprises, offering solutions for cybersecurity intelligence, financial crime, compliance, and secure application access across diverse networks and devices.

51 - 200 employees

🔒 Cybersecurity

📋 Compliance

🏛️ Government

💰 Series B on 2017-08

📋 Description

• IOC Monitoring & Incident Response: Keep Icinga, Grafana, and LogRhythm dashboards visible and acted upon at all times, detect, triage, and resolve service or security anomalies; lead first-line response and publish station logs and FLASH/SitRep updates during active incidents​. • Security Operations: Perform vulnerability scanning, configuration hardening, and security impact assessments (SIA) for planned changes and develop and tune security detection use-cases; investigate alerts to conclusion ​. • Technical Operations: Execute patching, build-system management, release deployments, DNS and capacity changes, and routine maintenance windows and own change-management tickets through CCB approval and post-deployment verification​. • Code, Automation & Tooling: Write or enhance infrastructure-as-code, CI/CD pipelines, monitoring plugins, and remediation scripts to eliminate toil and follow the SDLC: branch, peer-review, test in QA, and tag in GitLab before Production rollout​. • Project & Sprint Work: Deliver project tasks, tuning tickets, and cross-functional requests in weekly sprints and participate in backlog grooming, sprint planning, retrospectives, and daily SitRep meetings. • On-Call Rotation: Serve as primary/secondary on-call outside business hours; acknowledge PagerDuty alerts within 15 minutes and drive resolution or escalation​. • Documentation & Compliance Support: Create/maintain runbooks, SOPs, and system documentation; gather evidence for FedRAMP, SOC 2, PCI-DSS and other audits​. • US Citizenship Required

🎯 Requirements

• Bachelor’s degree or equivalent experience. • 3 + years hands-on experience in DevSecOps, SRE, security engineering, or systems reliability roles. • Proficiency with Linux (Ubuntu preferred), GitLab, CI/CD, configuration management (Terranova, Chef or similar), and one or more scripting languages (Python, Bash, Ruby). • Working knowledge of monitoring/alerting stacks (Grafana, Icinga, Kestrel) and incident platforms (PagerDuty). • Familiarity with security frameworks and hardening standards (NIST 800-53/171, CIS benchmarks, FedRAMP). • Clear, concise communicator able to write actionable incident timelines and technical runbooks.

🏖️ Benefits

• medical • dental and vision • flexible PTO • a 401k program • stock options