Remote DevSecOps Engineer — Build Security at Scale

Casa Inc.; Ottawa; Hybrid; CAD 174,000 - 215,000; Full time

Benefits offered by this job

Equity opportunities

Community and team culture

Flexible time off (3 weeks)

Job summary

Casa Inc. is hiring a DevSecOps Engineer to secure customers, data, and the company.

You will join the Security team reporting to the Chief Security Officer and help evolve our security program with scalable controls, training materials, and secure development practices. The role focuses on enforcing least privilege, onboarding/offboarding, and automating security processes while staying current with emerging threats and industry standards.

Qualifications

• Security certifications or equivalent real-world experience.
• Attacker mindset informs offensive/defensive problem solving.
• Deep background across multiple facets of security.

Responsibilities

• Handle internal security requests and ensure employees have appropriate access.
• Enforce least privilege access across tools and systems.
• Onboard and offboard employees across internal systems.
• Oversee the MDM system and monitor alerts.
• Review new technologies through a security lens and approve/deny usage.
• Shape and refine security best practices across the org.
• Triage vulnerabilities from pentests, code analysis, and alerts.
• Keep security docs and training materials current.
• Automate security processes and alerts where feasible.
• Participate in on-call rotation for production security incidents.
• Stay updated on security trends affecting the stack.

Skills

Security certifications

Attacker mindset

Linux security engineering

AWS security

Code security

Open-source tooling

Threat modeling

Communication

Job description

Casa Inc. is hiring a DevSecOps Engineer to secure customers, data, and the company.

You will join the Security team reporting to the Chief Security Officer and help evolve our security program with scalable controls, training materials, and secure development practices. The role focuses on enforcing least privilege, onboarding/offboarding, and automating security processes while staying current with emerging threats and industry standards.