Staff DevSecOps Engineer
Staff DevSecOps Engineer advancing security across SimpliSafe's product lifecycle — designing secure CI/CD pipelines, automating vulnerability management, CSPM, and detection engineering across backend services and AWS cloud platforms. Hybrid role: two core days in the Boston office, rest of the week remote.
- Compensation
- $135.9K–$181.2K / yr
- Location
- Boston, MA
- Work setup
- Hybrid
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years of experience in DevOps, cloud infrastructure, platform engineering, or related roles, with architecture-level experience
- Hands-on experience implementing DevSecOps practices and security controls across enterprise environments
- Expertise in CI/CD pipeline architecture, automation, and secure software delivery
- Experience with cloud platforms such as AWS or Google Cloud Platform
- Strong knowledge of Infrastructure as Code tools
- Experience with Docker, Kubernetes, container orchestration, and container security
- Strong understanding of IAM, RBAC, secrets management, encryption, certificates, and network security
- Knowledge of security frameworks and compliance standards such as NIST, CIS Benchmarks, and OWASP
- Experience with scripting and automation languages (Python, Bash, PowerShell, or similar)
- Strong troubleshooting, analytical, communication, and stakeholder management skills
Nice to have
- Certifications in cloud security or related fields
- Experience with additional cloud platforms or tools
- Knowledge of additional security tools and practices
Full description
About SimpliSafe
We’re a high-tech home security company that’s passionate about protecting the life you’ve built and our mission of keeping Every Home Secure. And we’ve created a culture here that cares just as deeply about the career you’re building. Ours is a no ego culture of collaboration and innovation where those seeking their next challenge can find big opportunities and make a huge impact on the lives of all those who we protect. We don’t just want you to work here. We want you to grow and thrive here.
We’re embracing a hybrid work model that enables our teams to split their time between office and home. Hybrid for us means we expect our teams to come together in our state-of-the-art office on two core days, typically Tuesday, Wednesday, or Thursday – working together in person and choosing where they work for the remainder of the week. We all benefit from flexibility and get to use the best of both worlds to get our work done.
Why are we hiring?
Well, we’re growing and thriving. So, we need smart, talented, and humble people who share our values to join us as we disrupt the home security space and relentlessly pursue our mission of keeping Every Home Secure.
About the Job
At SimpliSafe, the Staff DevSecOps Engineer is responsible for advancing security across the product lifecycle, spanning backend services and AWS cloud platforms. This role drives the implementation of security-by-design principles, integrating automated security testing, infrastructure security controls, vulnerability management, and cloud governance into engineering workflows.
Working closely with Security, Engineering, and IT teams, you will design and implement resilient security architectures, secure CI/CD pipelines, and cloud-native protections that enable secure, scalable, and compliant product delivery.
Primary Responsibilities Include
- Design and implement DevSecOps practices and security controls across enterprise environments.
- Architect and maintain CI/CD pipelines for secure software delivery.
- Utilize cloud platforms such as AWS, Google Cloud Platform to optimize infrastructure.
- Work with Docker, Kubernetes, and container orchestration for secure deployment.
- Automate tasks using scripting languages like Python, Bash, PowerShell, or similar tools.
- Lead vulnerability management initiatives by identifying, prioritizing, and remediating cloud, application, container, and infrastructure vulnerabilities through scalable automation.
- Develop detection engineering capabilities, including security monitoring, alerting, threat detection, and incident response workflows across cloud environments.