DevSecOps Penetration Tester — Growth, Mentorship, Benefits

Subway Group; Pensacola (FL); On-site; USD 65,000 - 91,000; Full time

Benefits offered by this job

Health premiums

Certifications funded

Mentor

Job summary

Subway Group in Pensacola, FL is seeking a mid-level Penetration Tester to help shape secure software at speed. You’ll write tests early, assess initiatives, and collaborate across DevSecOps, security, and engineering teams to improve code quality.

The role rewards practical experience: at least 3 years in relevant security work, 4+ years container security, and the ability to translate complex technical concepts for non-technical stakeholders.

Qualifications

• At least 3 years of real-world security experience with tangible impact.
• Strong understanding of container security and DevSecOps practices.
• Ability to communicate complex concepts to non-technical audiences.
• Proactive, collaborative, and eager to learn.

Responsibilities

• Ensure code quality through automated linting, testing, and static analysis
• Architect fault-tolerant distributed systems leveraging Network Security and People Management
• Configure and manage infrastructure as code across staging and production
• Sketch the Initiative architecture, defend it in review, then build the thing
• Contribute to sprint planning, estimation, and technology roadmap discussions
• Build responsive, accessible front-end interfaces with DevSecOps
• Write clean, well-tested code that scales with Subway's growing user base
• Read the People Management stack traces others skim past, and trace bugs to their root

Skills

Container Security

DevSecOps

Code Quality

Mentoring

Job description

Subway Group in Pensacola, FL is seeking a mid-level Penetration Tester to help shape secure software at speed. You’ll write tests early, assess initiatives, and collaborate across DevSecOps, security, and engineering teams to improve code quality.

The role rewards practical experience: at least 3 years in relevant security work, 4+ years container security, and the ability to translate complex technical concepts for non-technical stakeholders.