Staff DevSecOps Engineer (Product Security)

Location: Hybrid, Austin, Texas, United States

Company

hirify.global provides data management and analytics solutions that help large enterprises transform complex data into actionable insights.

What you will do

• Design, develop, deploy, maintain, and operationalize self-service security tools and services for the internal product security platform.
• Lead complex security projects, including end-to-end tool development and creation of new platform capabilities.
• Automate and integrate SAST, DAST, SCA, IAST, and other security controls into CI/CD pipelines and developer workflows.
• Lead secure multi-cloud architecture and deployment across AWS, Azure, and Google Cloud using infrastructure as code.
• Perform security architecture reviews, develop threat models, provide security-as-code guidance, and collaborate with SRE on monitoring and production security visibility.
• Drive security engineering standards, support compliance and incident response, deliver DevSecOps training, and mentor junior security team members and security advocates.

Requirements

• BSc/MSc in a related field or equivalent experience.
• Proven experience designing, developing, and deploying security tools and services used by engineering or security teams, such as security scanners, secrets management, or policy engines.
• Expertise in DevSecOps and practical experience implementing security controls in CI/CD pipelines, including Jenkins, GitLab CI, or GitHub Actions.
• Deep experience with large-scale cloud security engineering in AWS, Azure, and Google Cloud, including automated network provisioning and secure configuration management.
• Experience reviewing code in one or more of Java, Python, Go, or JavaScript/TypeScript.
• In-depth knowledge of Kubernetes operations and security, including Helm for deployment and policy enforcement.
• Expertise in infrastructure as code and configuration management tools such as Terraform, CloudFormation, or Ansible.
• Experience with security tools and platforms including HashiCorp Vault, Splunk, and CrowdStrike or similar EDR solutions.
• Deep understanding of web service frameworks, distributed architectures such as event-driven systems, microservices, and serverless, and their security challenges; experience with security reviews, threat modeling, and risk assessments for complex distributed systems.

Nice to have

• Security certifications such as CISSP or CISA.
• Familiarity with hirify.global products or other distributed computing systems, or willingness to learn them in depth.

Culture & Benefits

• Hybrid work arrangement with a flexible work-from-home policy.
• Generous paid time off and additional Unplugged Days supporting work-life balance.
• Mental and physical wellness programs.
• Phone and internet reimbursement.
• Continued career development, comprehensive benefits, paid volunteer time, and employee resource groups.
• This role is not eligible for immigration sponsorship.