Staff DevSecOps Engineer Mountain View, CA

Aerospike - Mountain View, CA

Full-time - Senior

Mountain View, CA

Publishing Industries

About the position

The Staff DevSecOps Engineer at Aerospike plays a crucial role in enhancing the security posture of the organization by integrating security practices into the software development lifecycle. This position involves collaborating with various stakeholders to ensure that security requirements are met while maintaining efficient development processes. The engineer will implement security standards, automate security processes, and mentor junior engineers, all while ensuring compliance with regulatory requirements.

Responsibilities

• Implement and maintain security standards, automation, and processes within CI/CD pipelines.
• Identify and prioritize potential threats, vulnerabilities, and risks in the software development lifecycle.
• Define and enforce secure configurations for cloud and on-premises environments using IaC tools.
• Develop and implement security guardrails, automated testing, and monitoring frameworks.
• Act as the primary escalation point for security incidents, performing root cause analysis and driving remediation efforts.
• Guide and mentor junior engineers and advocate for secure coding and DevSecOps culture.
• Create and maintain comprehensive security documentation, metrics, and reports.
• Collaborate with business stakeholders to understand and document their security requirements.
• Serve as the primary liaison between business units and the engineering team.
• Identify, evaluate, and implement security tools and technologies that address business needs.
• Participate in the design and architecture of secure systems and applications.
• Stay current with emerging security trends, threats, and technologies.

Requirements

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field (or equivalent work experience).
• Minimum 7-10 years of experience in DevSecOps, DevOps, or Security Engineering roles.
• Strong understanding of cloud security (AWS, Azure, GCP).
• Excellent written and verbal communication skills.
• Ability to lead without authority and strong problem-solving skills.

Nice-to-haves

• CISSP, CEH or other relevant security certifications.
• Familiarity with DevSecOps practices and tools.