Senior DevOps Engineer

Scanner.dev; San Francisco (CA); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Medical

Remote-friendly

In-person collaboration

Job summary

Scanner.dev is seeking a DevOps Engineer who will own deployment, upgrades, and operation of Scanner across AWS accounts and regions. You’ll manage multi-account infrastructure, ensure fast, reliable, and secure log search services, and drive efficiency with IaC tooling.

Ideal candidates have 5+ years in DevOps/SRE, deep AWS knowledge, and comfort with TypeScript and Rust, in a fast-paced, low-ceremony environment.

Qualifications

• Minimum 5 years in infrastructure, DevOps, SRE, or platform engineering.
• Deep AWS fluency (IAM, VPC, ECS, Lambda, S3) and IaC tooling.
• Experience owning CI/CD end to end and security posture.

Responsibilities

• Own deployment, upgrade, and operation of Scanner in multi-account, multi-region AWS setup.
• Manage CI/CD end-to-end and ensure observability, uptime, and cost efficiency.
• Implement least-privilege security and access controls across environments.

Skills

DevOps

AWS

CI/CD

Observability

Security posture

TypeScript

Rust

Tools

Pulumi

Terraform

CDK

Job description

About Scanner

At Scanner, we’re committed to building the best tools in the world (in Rust!) for teams to search and query through enormous piles of data. Whether you're debugging a distributed system, or monitoring a sprawling backend deployment for security risks, so many problems that modern engineering teams face are ultimately about sifting through giant haystacks in search of small but valuable needles. Scanner provides a magical user experience with fast queries, allowing teams to manage massive data sets with far more ease than they can with existing tools.

What We Built

We believe Data Lakes are the future of security data. Scanner is the world's fastest full-text search and detection platform for Security Data Lakes.

Security teams can now search years and petabytes of logs in seconds (up to 700x faster than alternatives), eliminate SIEM coverage blind spots at 70-80% lower cost, and deploy in a day, all while maintaining full custody of their data in their own S3 buckets.

We believe security tools should scale with your data, not your budget. Teams shouldn't have to choose between comprehensive coverage and financial sustainability.

The Team

We're an early-stage team where every person has outsized impact on what we build and how we serve customers.

People join Scanner because they want to:

• Solve genuinely hard technical problems - Making petabyte-scale search feel instant requires deep systems thinking and novel approaches.
• Work pragmatically and move fast - We ship quality products quickly by focusing on what actually matters to customers.
• Have direct impact - Talk to users, shape product direction, and see your work make a difference immediately

We're builders focused on creating genuinely transformative tools for security teams dealing with massive data challenges.

The Role

We're looking for a DevOps Engineer to own how Scanner gets deployed, upgraded, and operated everywhere it runs. We currently ship two ways: a managed SaaS where we run every piece of the infrastructure in our own AWS accounts, and a Bring Your Own Cloud deployment where we provision the data plane directly into the customer's AWS account. You'll own that system end to end. The infrastructure you’ll run indexes and queries hundreds of terabytes to petabytes of logs per day, across dozens of accounts, so efficiency, observability, and uptime are all paramount. A strong candidate will have:

• A minimum of 5 years of professional experience in infrastructure, DevOps, SRE, or platform engineering.
• Deep AWS fluency (IAM, VPC and networking, ECS, Lambda, S3) and production experience with infrastructure-as-code like Pulumi, Terraform, or CDK across multiple accounts and regions.
• Experience owning CI/CD end to end.
• A strong focus on building systems using the principle of least privilege, and focusing on a security posture that enterprises expect: tightly scoped roles, minimal cross-account trust, private networking, compliance evidence for SOC 2 Type II.
• A strong operations instinct for observability, incident response, and cost efficiency at scale.
• Comfort writing TypeScript (our Pulumi code) and reading Rust well enough to debug a service you didn't write. You don't need to have shipped Rust before.
• Comfort working in a fast-paced and low process environment.

Our Tech Stack

Talented engineers can pick up new languages and frameworks quickly. Here’s what our tech stack looks like today, but if you come with a better way of doing things we’re flexible and committed to building the best tools for our customers no matter what!

• We use infrastructure-as-code tools like Pulumi to manage our deployments and cloud infrastructure.
• Our query system leverages highly burstable compute provided by serverless components like Amazon Lambdas.
• We use S3 to store logs at scale and MySQL to store metadata.
• Our log ingestion pipeline runs in Amazon Elastic Container Service (ECS).
• We use Rust throughout the backend, giving us extremely fast performance with strong security guarantees.
• Our frontend is written using Svelte and TypeScript.

Why you’ll love working here

• Impact & ownership: Join a small, high-trust team where your work directly impacts our users.
• Ambitious product: We solve hard problems with massive scale log search, threat hunting, and observability for cloud-native infrastructure.
• Fast-paced team & culture: We’re lean, collaborative and high-velocity.
• Growth & autonomy: We trust you to take major ownership, give you the space to grow, and we’ll support your professional development.

Compensation & Benefits

Competitive salary, meaningful equity, and comprehensive benefits (Medical, Dental, Vision, 401k, commuter). Remote-friendly with optional in-person collaboration in San Francisco, Mountain View, and Seattle.