Senior DevSecOps Engineer — Remote & Flexible Hours

Remote; San Francisco (CA); Remote; USD 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Flexible schedule

Remote work option

Paid vacation

Health insurance

Professional development budget

Zusammenfassung

Boosta is seeking a Middle+/Senior DevSecOps Engineer to join our service team. You’ll own vulnerability management across code, dependencies, containers and IaC, and drive remediation with developers where needed.

You’ll oversee security in CI/CD, monitor logs with SIEM rules, tune WAF/Cloudflare, and collaborate with multiple teams on incident response and risk prioritization. Remote-friendly, global projects.

Qualifikationen

• Hands-on vulnerability management across code, containers, and IaC.
• Experience with SAST/DAST/SCA and secret scanning tools.
• Ability to triage findings by real risk and coordinate remediation.
• Familiarity with CI/CD security integrations and incident response.

Aufgaben

• Lead vulnerability management lifecycle: scan, triage, remediate, re-scan.
• Maintain and tune SAST/DAST/SCA tools and secret scanning.
• Review logs, adjust SIEM/Wazuh rules, and escalate to SOC as needed.
• Tune WAF/Cloudflare rules and support secure CI/CD pipelines.

Kenntnisse

Vulnerability management

SAST/DAST/SCA

CI/CD security

Docker

Kubernetes

Terraform/Helm

Python

Bash

GitLab CI / GitHub Actions / Jenkins

Cloud security (AWS/GCP/Azure)

Tools

Trivy

Snyk

SonarQube

Semgrep

OWASP ZAP

Gitleaks

Wazuh

WAF/Cloudflare

Jobbeschreibung

Boosta is seeking a Middle+/Senior DevSecOps Engineer to join our service team. You’ll own vulnerability management across code, dependencies, containers and IaC, and drive remediation with developers where needed.

You’ll oversee security in CI/CD, monitor logs with SIEM rules, tune WAF/Cloudflare, and collaborate with multiple teams on incident response and risk prioritization. Remote-friendly, global projects.