DevSecOps Engineer

Job Description

Salary: $130K - $155K

Who We Are

A unique, well-funded startup that builds cloud-based software for organizations to drive and align their organization around strategic roadmap planning.

From cars to smartphones, our mission is to provide innovative software solutions for organizations so they can plan the strategy of their products collaboratively and efficiently. We solve complex problems such as visualizing a product portfolio as it changes over time and sharing and aligning that information with the organization all while keeping it secure.

We invest in our people and give them what they need to be successful. Members of our team attend industry-leading conferences and have access to online training, as well as mentoring from senior members of the team. On day one, individuals joining us will be given a dedicated success coach to support them in onboarding and thriving at Gocious.

We have an environment where every team member is important and contributes directly to our mission. Smart people with diverse backgrounds come together to solve challenging problems, to lead, and to produce amazing things.

We believe staying healthy and having fun is key to high performance. Some ways we work fun into the everyday:

Group events like kayaking or escape rooms.

Wine tasting night where we get together to learn about foreign and domestic wine production as well as sample the differences.

Dedicated end-of-the-week decompression time that may include hearing a presentation on any topic from one of your colleagues, solving a puzzle together, or a friendly game of poker.

We are a small but cohesive team of people who love to celebrate each others achievements. We are looking forward to growing and changing as new people join us with fresh ideas.

This position is considered hybrid. We meet one day every other week at our office in Irvine CA. We also meet in person for 3 days every 10 weeks for long term planning sessions.

This requirement can change depending on business needs.

If you want to help organizations, put better products into the market, if you are passionate about your craft, if you are a lifelong learner, and want to grow a small startup as part of a cross-functional team, we want to meet you.

Benefits

Competitive Salary based on experience and skills

Bonus based on company results and individual performance

Health, Vision, & Dental

401k with 4% Matching Contributions

Paid Vacation & Sick Time

Opportunity to earn equity

Office located in Irvine California

Flexible schedules and remote work

PositionPrimary Responsibilities

Recommend solutions to enhance our security posture to help mitigate vulnerabilities.

Define and manage cloud networks, infrastructure, and services.

Engage with engineering teams to incorporate secure coding and security best practices into all phases of the SDLC.

Implement, manage, and maintain security testing tools and procedures as part of a CI/CD pipeline.

Coordinate cyber-security program management, such as risk reviews, table-top exercises, audit procedures, policy, and vendor management reviews.

Triage and investigate security alerts, including SIEM/SOAR.

Cultural Fit

Self-Motivated

Excited to try something new every day

Passionate about sharing your ideas

Open to feedback and improvements

Basic Skills and Qualifications

DevOps experience:

Implementing and maintaining CI/CD pipelines. Azure DevOps preferred.

Scripting (PowerShell or bash) and JSON KQL

Provisioning and maintaining cloud resources

Code scanning tools such as Veracode

Cloud compliance security management solutions such as 365 Defender, Purview, Intune, and Defender for Cloud

Experience with native cloud computing such as Azure, AWS, or Google Cloud. Azure experience preferred.

Experience with compliance platforms such as Secureframe, Vanta, or Dratta

Experience with log analytics and log management systems such as Sentinel and Azure Log Analytics

Demonstrates strong oral and written communication skills dealing with technical designs or concepts.

Ability to speak and write in English fluently. Exceptional verbal and written communication skills and using remote collaborative tools.

We cannot accommodate anyone requiring work visa sponsorship.

Preferred Qualifications

BS or MS in Computer Science or a related program

Azure Cloud Certifications

SecOps/DevOps experience:

Regulatory compliance experience. Experience working in an ISO-27001 certified workplace is a plus.

Implementing and maintaining cloud networks

Configuring firewalls and networks in the cloud

Experience working as part of a remote/hybrid team with different time zones.

Agile best practices and ceremonies

Experience in manufacturing, product management, and strategic project management.

Full-time

Hybrid remote