Staff DevSecOps Engineer

About SimpliSafe We’re a high-tech home security company that’s passionate about protecting the life you’ve built and our mission of keeping Every Home Secure. And we’ve created a culture here that cares just as deeply about the career you’re building. Ours is a no ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those who we protect. We don’t just want you to work here. We want you to grow and thrive here. We’re embracing a hybrid work model that enables our teams to split their time between office and home. Hybrid for us means we expect our teams to come together in our state-of-the-art office on two core days, typically Tuesday, Wednesday, or Thursday – working together in person and choosing where they work for the remainder of the week. We all benefit from flexibility and get to use the best of both worlds to get our work done. Why are we hiring? Well, we’re growing and thriving. So, we need smart, talented, and humble people who share our values to join us as we disrupt the home security space and relentlessly pursue our mission of keeping Every Home Secure. About the Job At SimpliSafe, the Staff DevSecOps Engineer is responsible for advancing security across the product lifecycle, spanning backend services and AWS cloud platforms. This role drives the implementation of security-by-design principles, integrating automated security testing, infrastructure security controls, vulnerability management, and cloud governance into engineering workflows. Working closely with Security, Engineering, and IT teams, you will design and implement resilient security architectures, secure CI/CD pipelines, and cloud-native protections that enable secure, scalable, and compliant product delivery. Primary Responsibilities Include • Design and implement DevSecOps practices and security controls across enterprise environments. • Architect and maintain CI/CD pipelines for secure software delivery. • Utilize cloud platforms such as AWS, Google Cloud Platform to optimize infrastructure. • Work with Docker, Kubernetes, and container orchestration for secure deployment. • Automate tasks using scripting languages like Python, Bash, PowerShell, or similar tools. • Lead vulnerability management initiatives by identifying, prioritizing, and remediating cloud, application, container, and infrastructure vulnerabilities through scalable automation. • Develop detection engineering capabilities, including security monitoring, alerting, threat detection, and incident response workflows across cloud environments. • Implement cloud security posture management (CSPM), continuous control monitoring, and automated remediation strategies. • Partner with engineering teams to perform architecture reviews, and security design assessments for new products and services. • Drive adoption of security best practices through technical leadership and organization-wide enablement programs. What You’ll Bring • 5+ years of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience. • Strong hands-on experience implementing DevSecOps practices and security controls across enterprise environments. • Expertise in CI/CD pipeline architecture, automation, and secure software delivery. • Experience with cloud platforms such as AWS, or Google Cloud Platform. • Strong knowledge of Infrastructure as Code tools • Experience with Docker, Kubernetes, container orchestration, and container security. • Strong understanding of IAM, RBAC, secrets management, encryption, certificates, and network security. • Knowledge of security frameworks and compliance standards such as NIST, CIS Benchmarks, and OWASP.