Principal DevSecOps Developer

Accountabilities:: Build, maintain, and improve security automation workflows to reduce manual tasks and streamline operations. Develop and manage infrastructure as code using Terraform, including creating and maintaining reusable modules. Implement AWS security controls, manage IAM policies, and enforce least-privilege access principles. Develop secure integrations between systems using APIs, programming, and scripting. Identify, investigate, and resolve security risks across cloud infrastructure and internal systems. Leverage AI tools, agents, and MCP integrations to enhance security workflows and automation. Troubleshoot technical issues involving infrastructure, networking, and security platforms. Strengthen security monitoring, threat detection, and incident response capabilities. Collaborate with Engineering, DevOps, and IT teams to implement security improvements. Proactively identify opportunities to enhance security practices, automate processes, and improve operational effectiveness. Requirements: Strong programming, scripting, and automation skills in one or more languages. Hands-on experience with AWS security services, IAM permissions, and least-privilege principles. Advanced Terraform skills, including the ability to independently write and maintain modules. Solid understanding of APIs, authentication mechanisms, and secure system integrations. Knowledge of security fundamentals, risk analysis, and cloud security best practices. Strong troubleshooting skills across infrastructure, networking, and technical operations. Experience using AI development tools, with the ability to independently review and validate generated code. Familiarity with AI agents, automation frameworks, or MCP integrations. Ability to work autonomously, take ownership, and solve complex technical problems. Strong communication, collaboration, and analytical skills. Nice to have: Experience with Tines or other Security Orchestration, Automation, and Response (SOAR) platforms. Familiarity with CrowdStrike, Okta, Akamai, or Sublime Security. Experience with Sumo Logic or comparable security monitoring tools. Knowledge of writing SIGMA or YARA detection rules. Understanding of event-driven architecture and enterprise IT systems. Experience with Kubernetes and container security. Knowledge of OWASP principles, including security considerations for large language models and AI applications. Experience with FleetDM, osquery, or endpoint security tools. Familiarity with GCP, Google Workspace, or Microsoft Entra ID. Experience with CI/CD pipeline security or software supply chain security. Background in threat hunting, security investigations, or security compliance frameworks. A proactive, curious, and adaptable approach to learning new technologies, improving processes, and using AI thoughtfully while applying independent technical judgment. Benefits: Competitive salary of $150,000–$200,000+. Stock option plan. Employer-paid medical, dental, and vision insurance. Flexible paid time off (PTO). Professional growth and development opportunities. Paid parental leave. Health and wellness initiatives. Remote work opportunity in Canada.