Remote DevSecOps Engineer for OSS-SIRT Security & CI/CD

United States Digital Space LLC; United States; Remote; USD 170,000 - 185,000; Full time

Job summary

Open Source Security Foundation (OpenSSF) is seeking an OSS-SIRT DevSecOps Engineer to support the day-to-day security and operational reliability of the Akrites vulnerability pipeline and OSS-SIRT infrastructure. This role involves making design and strategic decisions for the SIRT tooling suite and addressing operational toil as the tooling grows.

Key responsibilities include securing infrastructure, maintaining databases and APIs, ensuring SLAs, and scaling with automation and IaC.

Qualifications

• 5–10 years in DevSecOps, Security and/or SRE, or platform operations.
• Experience securing and running production systems with APIs and data pipelines.
• Familiarity with cloud platforms (GCP preferred) and CI/CD workflows on GitHub.

Responsibilities

• Secure the infrastructure — Ensure high security hardening standards and procedures are maintained; develop security signals for the tooling pipeline.
• Maintain and operate databases, APIs and ingestion pipelines, and CI/CD systems.
• Ensure SLAs are met — monitor system health, performance, and availability; support backups and disaster recovery.
• Scale with growth — assist with scaling infrastructure and implement infrastructure-as-code and automation.

Skills

DevSecOps experience

SRE experience

Security operations

Tools

GitHub CI/CD

GCP

Job description

Open Source Security Foundation (OpenSSF) is seeking an OSS-SIRT DevSecOps Engineer to support the day-to-day security and operational reliability of the Akrites vulnerability pipeline and OSS-SIRT infrastructure. This role involves making design and strategic decisions for the SIRT tooling suite and addressing operational toil as the tooling grows.

Key responsibilities include securing infrastructure, maintaining databases and APIs, ensuring SLAs, and scaling with automation and IaC.