Senior DevSecOps Engineer: Cloud Security & CI/CD

United States Digital Space LLC; United States; Remote; USD 99,000 - 128,000; Full time

Benefits offered by this job

Stock options

Two annual performance reviews

Health + Dental insurance

Company laptop

Job summary

CrossmintGlobal is seeking a Senior DevSecOps Engineer to own the operational security of our cloud environments, developer pipelines, and vulnerability management. You will partner with Engineering and IT & Infrastructure to embed security into the SDLC and treat security as a core discipline rather than bolt-on.

We offer stock options, annual performance reviews, and a strong focus on compliance (SOC 2, ISO 27001).

Qualifications

• 4–8 years of security engineering experience.
• 3+ years securing AWS: IAM, Security Hub, CloudTrail, GuardDuty, and KMS.
• Strong CI/CD security: GitHub Actions, secrets scanning, and dependency management.
• Experience with secure code review or core application security concepts (OWASP, auth flows, API security).
• Experience with SOC 2 preferred, ISO 27001 or similar acceptable.
• Fluent communicator across technical teams—can work with developers and IT engineers without owning their domains.
• Self-directed and organized; tracks own work.
• Experience using AI-assisted tools such as Claude or GitHub Copilot for security automation.

Responsibilities

• Own security across AWS environments (primary) with exposure to other clouds.
• Design, maintain, and monitor security controls across cloud infrastructure and logs.
• Manage security-relevant access controls and reviews.
• Provide security input to IT & Infrastructure on network segmentation and endpoint security.
• Secure CI/CD pipelines and GitHub Actions environments; review dependencies.
• Perform secure code reviews and provide application security support to engineering teams.
• Review authentication flows, payment logic, and API security.
• Remediate vulnerabilities with engineers and embed security in SDLC.
• Own vulnerability management end-to-end and coordinate external audits.
• Support SOC 2 and other compliance efforts with evidence gathering and controls documentation.

Skills

Security engineering

AWS security

CI/CD security

Secure code review

SOC 2 / ISO 27001

Cross-team communication

Autonomy

AI tools

Education

Tools

GitHub Actions

Job description

CrossmintGlobal is seeking a Senior DevSecOps Engineer to own the operational security of our cloud environments, developer pipelines, and vulnerability management. You will partner with Engineering and IT & Infrastructure to embed security into the SDLC and treat security as a core discipline rather than bolt-on.

We offer stock options, annual performance reviews, and a strong focus on compliance (SOC 2, ISO 27001).