Senior DevSecOps Engineer at Justworks (New York, New York)

Justworks combines HR software with human support to run payroll, benefits and compliance for small businesses. We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues.

Key responsibilities

• Own security automation across our CI/CD pipelines (GitHub Actions): SAST, SCA, secrets detection, and container scanning that runs fast
• Build security into our golden path templates for Go, Rails, and Vue.js services, so new services start secure by default
• Dependency management, artifact signing, SBOM generation, and provenance for what we ship
• Implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement
• Coordinate vulnerability exposure remediation across all of Engineering, including code vulnerabilities, infrastructure configuration changes
• Build vulnerability management automation that routes findings to owning teams with context, deduplicates noise

Requirements

• 5+ years of professional experience in software engineering, infrastructure, or security engineering
• 3+ years focused on application security, security automation, or DevSecOps practice
• Hands-on experience integrating security tooling into CI/CD pipelines (GitHub Actions strongly preferred): SAST, SCA, secrets detection
• Proficiency with AWS and its security services (IAM, GuardDuty, Security Hub, CloudTrail)
• Experience with Kubernetes and infrastructure-as-code (Terraform preferred), including policy-as-code enforcement
• Proficiency in at least one programming language (Go, Python, or Ruby preferred); you build tooling, not just configure it

Location and schedule

• Onsite in New York, New York

Salary and benefits

US base salary $188,000 to $242,000 a year. Justworks offers benefits, wellness programmes and company retreats.

How to apply

Apply on the company's own site.