Sr DevSecOps Engineer

Rapid7 - Austin, TX

Full-time - Mid Level

Austin, TX

5,001-10,000 employees

Professional, Scientific, and Technical Services

About the position

As a Senior Software Engineer in the Platform Delivery Security team at Rapid7, you will play a crucial role in applying cloud security best practices across the Rapid7 platform. Your primary responsibility will be to enhance and maintain the security of our cloud infrastructure, ensuring that it remains secure, reliable, and available for the thousands of customers who depend on it daily. This position requires a motivated engineer who is not only skilled in coding and infrastructure management but also has a strong focus on cloud security and the ability to solve complex problems. You will collaborate closely with our Information Security teams to align goals and continuously improve platform security, tackling new challenges and iterating on infrastructure with a strong emphasis on collaboration, communication, and growth. The Platform Delivery Security team is dedicated to managing and enabling platform security across all Rapid7 products through DevOps tooling and cloud security best practices. We foster a DevOps culture that empowers development while promoting security and reliability. In this role, you will work with a variety of technologies, including AWS, Azure, GCP, Docker, Kubernetes, Terraform, Jenkins, Ansible, GitHub, and Slack. Your contributions will be vital in ensuring that our platform not only meets security standards but also evolves to address emerging threats and vulnerabilities. You will be expected to engage with engineering teams to enhance security from the design phase through deployment and operations, automate infrastructure management, and implement cloud security best practices using Rapid7 products and automated tooling. Additionally, you will gather technical evidence for security audits as needed, ensuring that our security measures are robust and effective. This role is ideal for someone who is passionate about cloud security and developer experiences, and who thrives in a dynamic, fast-paced environment where continuous improvement is a core value.

Responsibilities

• Collaborate with engineering teams to enhance security across the platform from design to deployment and operations.
• Engage with Information Security teams to evolve protection measures for customer data and the platform.
• Automate infrastructure using Terraform, Jenkins, Ansible, and Docker/Kubernetes.
• Manage technical details of projects, organizing and planning infrastructural work without downtime.
• Define and implement Cloud Security best practices across the Platform using Rapid7 products and automated tooling.
• Gather technical evidence for security audits when required.

Requirements

• Proven experience working with SaaS services and infrastructure.
• Proficient in a Cloud Provider such as AWS/Azure/GCP with experience in services like EC2, EKS or ECS, IAM, VPC networking, S3.
• Strong networking and Linux system administration skills.
• Comfortable with programming languages such as Python, Ruby, Javascript, Java, or Bash.
• Working knowledge of infrastructure as code tools like Terraform, CloudFormation, Chef, Ansible, or Puppet.
• Passionate about Cloud Security and enhancing developer experiences.
• Goal-driven with a positive attitude and strong communication skills.
• Thorough understanding of engineering best practices, including testing paradigms and effective peer code reviews.

Nice-to-haves

• Experience with security audits and compliance frameworks.
• Familiarity with container orchestration and management tools.
• Knowledge of security best practices in cloud environments.

Benefits

• Comprehensive health insurance coverage.
• 401k retirement savings plan with matching contributions.
• Flexible scheduling options for work-life balance.
• Professional development opportunities and continued education support.
• Paid time off and holidays.