DevSecOps Engineer

About this role

<p><strong>MEET CASA</strong></p> <p><a href="http://casa.io">Casa</a> is the secure home for your bitcoin. We’re the leading provider of Bitcoin self-custody solutions, the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships. </p> <p><strong>THE ROLE</strong></p> <p>Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. It will also be a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.</p> <p>The successful candidate has experience developing scalable security controls and approaches in accordance with industry standards.</p> <p>Compensation: $125,000-155,000 USD</p> <p><strong>WHAT YOU'LL DO: </strong></p> <ul> <li>Handle internal security requests and make sure employees have the tools and access they need without over-provisioning</li> <li>Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles</li> <li>Onboard and offboard employees across internal systems</li> <li>Oversee our MDM system and stay on top of alerts</li> <li>Review and assess new technologies (tools, code frameworks, third-party providers, internal apps) through a security lens</li> <li>Help shape and refine security best practices across the org</li> <li>Triage and work through vulnerabilities surfaced by pen testing, static analysis, responsible disclosures, and automated alerts</li> <li>Keep security documentation and training materials fresh and useful</li> <li>Automate security processes and alerts wherever you can find the leverage</li> <li>Participate in a shared on-call rotation for critical production security issues</li> <li>Stay abreast of the latest security events and trends</li> <li>Participate in regular security training and certification acquisition </li> <li>Ensure our software development lifecycle remains secure as we continue to evolve its processes.</li> <li>Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools</li> <li>Stay current on emerging threats, security trends, and what's happening across our stack and industry</li> <li>Investigate and resolve infrastructure incidents to keep things running smoothly</li> </ul> <p> </p> <p><strong>WHO YOU ARE: </strong></p> <ul> <li>You have security certifications or equivalent real-world experience</li> <li>You think like an attacker, and a hacker mindset is genuinely how you approach problems</li> <li>Deep background across multiple facets of security</li> <li>5+ years implementing security in Linux-based infrastructures, AWS, and code</li> <li>Comfortable with open-source tooling, cloud environments, and multiple operating systems</li> <li>Experience building security solutions that actually scale</li> <li>Hands-on with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning</li> <li>Familiar with hardening AI tooling to prevent security incidents</li> <li>Strong communicator who can present findings to both technical and non-technical audiences</li> <li>Bonus points for experience or genuine interest in cryptocurrency / cryptography</li> </ul> <p><strong>WHY CASA?</strong></p> <p>At Casa, our mission is to empower individuals to secure their digital sovereignty, and <strong>we empower our employees to do their best work. </strong></p> <ul> <li><strong>Ownership. </strong>Private key management is the beginning of a future you can truly own, and at Casa, everyone has a role. We offer equity opportunities so our employees can benefit from what we are building together </li> <li><strong>Community. </strong>Inclusivity is important to us.<strong> </strong>We value each other and our contributions. Our team, known as the Casa Space Fleet, brings out the best in everyone while having plenty of fun along the way</li> <li><strong>Rest and Relaxation</strong>. We believe in the power of personal time, so we offer as much flexible time as you need. We encourage you to take at least 3 weeks off a year </li> <li><strong>Health Benefits.</strong> We provide medical coverage with FSA options, dental, vision, and access to mental health providers</li> <li><strong>Setup for Remote Success.</strong> Our team is both decentralized and effective. We reimburse up to $400 for anything you need to set up your home office </li> <li><strong>Investment Avenues</strong>. We partner with resources so you can invest a portion of your paycheck in Bitcoin, and we also have the more traditional 401(k) option </li> <li><strong>Maternity/Paternity Leave</strong>. We provide 12 weeks for maternity / 4 weeks for paternity</li> </ul> <p><em>*As Casa is a fully remote company hiring candidates…