DevSecOps Engineer

🕒 July 14

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Overflow

WebsiteLinkedInAll Job Openings

11 - 50 employees

💼 Consulting

⚖️ Legal

💳 Fintech

💰 $10M Series A on 2021-07

Consulting • Legal • Fintech

Overflow is on a mission to inspire the world to give by helping nonprofits easily and securely accept stock and cryptocurrency donations. The company focuses on providing a streamlined process for charitable donations, catering specifically to the nonprofit sector.

📋 Description

• Secure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management. • Refine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices. • Deploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents. • Own and optimize our continuous integration and deployment (CI/CD) pipelines. • "Shift Left" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow. • Act as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training. • Action on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations) • Partner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments. • Ensure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.

🎯 Requirements

• 5+ years in DevOps, Site Reliability, or Cloud Platform roles • Deep, hands-on experience with Docker and AWS ECS Fargate • Extensive experience building and maintaining robust deployment pipelines using GitHub Actions • Practical experience maintaining SOC 2 technical controls and a strong understanding of the architectural requirements for PCI-DSS (ideally Level 1) compliance

🏖️ Benefits

• Competitive base salary with equity eligibility • Medical, dental, and vision coverage for employees and dependents • Generous paid time off and company holidays • Paid parental leave • 401(k) retirement plan • Dedicated mental health and therapy stipend to support personal well-being • Team retreats and intentional in-person gatherings throughout the year