Senior DevSecOps Engineer (Hybrid)

Senior DevSecOps Engineer (Hybrid 1-3 days a week onsite in Irvine, HQ)

Overview:

The Senior DevSecOps Engineer is a hands-on technical position responsible for designing, building, and operating a diverse set of security controls and process automations.  Our DevSecOps team is responsible for delivering security automation projects for our Infosec team.  In addition to internal security tasks, this role will work with the Engineering and SRE teams to improve security posture and tooling on the CI/CD pipeline, as well as cloud environments. 

The impact you'll make:

• Design and build greenfield automations and solutions for the security team
• Assess infrastructure and application vulnerabilities, and take remediation actions as appropriate
• Ensure policies and standards are being properly applied throughout the entire organization
• Build pipelines supporting Continuous Delivery, SDLC Security tools
• Operate and develop in a SOAR environment
• Collaborate with information security, SRE and engineering teams to identify Platform needs and issues with respect to security
• Build and run Container-based delivery (Docker) and serverless workflows (Lambda, Step-Functions)
• Operate and manage AWS IAM permissions based on defined roles and responsibilities
• Ensure tight security for an e-commerce platform including data encryption, security groups, environment scanning, etc.
• AWS resource provisioning and management (based on immutable compute resources) 
• Micro-service support (service registry, service-to-service authentication, authorization, and auditing) 
• Author Agile stories, estimate story points, assist with sprint planning and retrospectives
• Perform advanced security technical troubleshooting for cloud environments
• Participate in incident response exercises and continue documenting security and incident response procedures

What you've accomplished:

• 6-8 years combined experience in Software Engineering, DevOps, and/or Information Security
• Literacy in Python and/or other programming or scripting languages.
• Knowledge of PCI, HIPPA. GDPR, CCPA, and other security-related standards.
• Collaboration, drive, and open communication internally and across teams
• A passion for building innovative greenfield projects, with a focus on security
• Strong problem-solving skills, and the ability to apply it to foreign systems
• The ability to take an idea from concept to completion
• Knowledge and experience with typical DevOps and DevSecOps tooling (CI/CD tools, github, k8s, docker, linux, etc)
• Operationally savvy, experience with monitoring, alerting, and analyzing system metrics to identify problems and understanding system behavior specific to security concerns
• Production experience with public cloud (AWS preferred)
• Strong communication and collaboration skills

Bonus Points:

• Security certifications such as CISSP, CCSP, GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH) are a plus
• Experience with SOAR tooling
• Experience deploying immutable infrastructure (terraform preferred)

The base range for this position is $175,000.00- $195,000.00

2024 Benefits for Full-Time, Regular Employees:

• Physical Health benefits: Medical, Dental & Vision:
• Employee - employer paid premium 100%
• Company contribution to a HSA when electing the High Deductible Health Plan
• For plans that offer coverage to your dependents, you pay a small contribution
• Mental Health benefits:
• Free access to CALM app for employees and dependents
• Employee Training
• Mental Health seminars and Q&A sessions
• Basic Life & AD&D - employer paid 1x salary up to $250,000
• 401(k) Retirement Plan (with employer match contribution)
• Generous PTO, Paid Sick Leave, and Company Holidays
• Supplemental, voluntary benefits
• Student Loan Repayment/529 Education Savings - including a company contribution
• FSA (Medical, Dependent, Transit and Parking)
• Voluntary Life and AD&D Insurance
• Critical Illness Insurance
• Accident Insurance
• Short- and Long-term Disability Insurance
• Pet Insurance
• Family planning/fertility
• Identity theft protection
• Legal access to a network of attorneys
• Paid parental leave

Why Work at Weedmaps?

• You get to work at the leading technology company in the cannabis industry
• You get to play a meaningful role in helping to advance can