Sr DevSecOps Engineer

Notability is a registered trademark of Ginger Labs, Inc.; San Francisco (CA); Hybrid; USD 185,000 - 243,000; Full time

Benefits offered by this job

Equity awards

Fully covered healthcare (family)

401k with matching

Lunch stipend

Transit stipend

Home office stipend

ISP stipend

Phone stipend

Job summary

Notability is seeking a Sr DevSecOps Engineer to design and secure our cloud infrastructure. You will build scalable CI/CD pipelines, implement robust network security, and automate provisioning with Terraform.

Collaboration with development teams will ensure secure architecture decisions while optimizing costs and maintaining disaster recovery. Ideal candidates bring 5+ years in DevSecOps/SRE, strong networking, and hands-on experience with Kubernetes, Terraform, and security tools.

Qualifications

• 5+ years of experience in DevSecOps, SRE, or infrastructure engineering.
• Strong networking knowledge (TCP/IP, DNS, load balancing, CDNs).
• Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR).
• Extensive knowledge of secure best practices for Cloud based Infrastructure.
• Proficiency in scripting (Python, Bash, Go).
• Infrastructure as code and automation focus with scalable security practices.
• Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, or PCI-DSS).
• Monitoring and observability tools (Prometheus, Grafana, PagerDuty).
• Secrets management and identity/access management.

Responsibilities

• Design, implement, and maintain cloud infrastructure (GCP).
• Build and optimize CI/CD pipelines for automated testing and deployment.
• Implement network security controls, including firewalls, VPNs, and segmentation.
• Monitor systems for security threats and respond to incidents.
• Manage container orchestration (Kubernetes, Docker).
• Automate infrastructure provisioning using Terraform.
• Conduct security audits and implement remediation measures.
• Implement observability solutions (logging, metrics, tracing, alerting).
• Collaborate with development teams on secure architecture decisions.
• Optimize cloud costs and resource utilization.
• Maintain disaster recovery and backup strategies.

Skills

Cloud infrastructure

Network security

CI/CD pipelines

Scripting (Python, Bash, Go)

Kubernetes

Terraform

Education

Bachelor's degree in Computer Science or related field

Tools

GCP

WAFs

CNAPP

IDS/IPS

SIEM

SOAR

Prometheus

Grafana

Job description

Join Notability and shape the future of learning. We’re building the next generation of tools designed not just to capture notes, but to fundamentally improve how people learn, think, and collaborate. Our app brings the natural expressiveness of paper into the digital age, empowering millions of students, educators, and professionals worldwide to organize their ideas, deepen their understanding, and achieve their goals. Our mission is simple: we help you learn.

As part of our team, you’ll help create experiences driven by empathy, exceptional design, and the belief that great ideas can come from anywhere—including you. Come help us make learning better for everyone.

We’re looking for a Sr DevSecOps Engineer with strong network security expertise to help build, secure, and maintain our cloud infrastructure. You’ll build infrastructure automation, CI/CD pipelines, and defensive security measures to ensure our systems are reliable, scalable, and secure.

What You’ll Do

• Design, implement, and maintain cloud infrastructure (GCP)
• Build and optimize CI/CD pipelines for automated testing and deployment
• Implement network security controls, including firewalls, VPNs, and segmentation
• Monitor systems for security threats and respond to incidents
• Manage container orchestration (Kubernetes, Docker)
• Automate infrastructure provisioning using Terraform
• Conduct security audits and implement remediation measures
• Implement observability solutions (logging, metrics, tracing, alerting)
• Collaborate with development teams on secure architecture decisions
• Optimize cloud costs and resource utilization
• Maintain disaster recovery and backup strategies

What You Need

• 5+ years of experience in DevSecOps, SRE, or infrastructure engineering
• Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs)
• Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR)
• Extensive knowledge of secure best practices for Cloud based Infrastructure
• Proficiency in scripting (Python, Bash, Go)
• You speak and write in Infrastructure as code, with an enthusiasm for automation, and a passion for scalable and reproducible security practices
• You possess broad security knowledge to connect the dots across domains and identify holistic ways to decrease the overall threat surface
• Have a strong grasp of offensive security to anticipate risks from an adversary’s perspective, not just check compliance boxes
• Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, or PCI-DSS)
• Proficiency with monitoring and observability tools (Prometheus, Grafana, PagerDuty)
• Knowledge of secrets management and identity/access management
• Excellent communication skills
• Bring experience with modern application stacks, infrastructure, and security tools to implement pragmatic defenses
• Experience with vulnerability management and threat hunting

Bonus Points

• Experience with Typescript and SQL
• Security certifications (CISSP, CEH, AWS Security Specialty)
• Experience with zero-trust architecture
• Background in penetration testing or vulnerability assessment

For this position we are targeting a base pay between $185,000-$243,000. Actual compensation offered will be determined by factors such as job-related knowledge, skills, and experience.

This role follows a hybrid model, with a minimum of two days onsite at our downtown San Francisco office and flexibility to work remotely from home the rest of the week.

How We Work

Each member of our team contributes to all parts of our products. We trust each other to make decisions independently while also considering our common goals and values. We share ideas openly, and we collaborate across disciplines to ensure that our decisions make sense from all perspectives.

When We Work

We actively promote work-life balance. Our schedules are flexible, our hybrid policy supports remote work when it makes sense, and we have a “as long as you get your work done” approach to time off.

Why You’d Love Working Here

We work in downtown SF near Market Street, just a short walk from two BART/Muni stations. Our office has height-adjustable desks to help us stay limber, spacious conference rooms for both small and large team meetings, and a well-stocked kitchen full of goodies to enjoy :). Our team is growing, collaborative and down to earth. We want everyone to do their best work and find passion in what they do.

Benefits

• Competitive compensation that includes base salary, bonuses and profit sharing
• Equity Awards in the form of Stock Options
• Comprehensive healthcare _ fully covered _ for you and your family including medical, dental, and vision
• Flexible work and vacation schedules
• 401k with matching contributions
• Matching gifts to nonprofits
• Lunch Stipend (When Working from HQ)
• Public transit stipend
• Home workstation reimbursement
• ISP stipend
• Monthly phone bill stipend

Notability is proud to be an Equal Opportunity employer committed to diversity and inclusivity in the workplace. All aspects of employment are decided on the basis of merit, qualifications, and business needs. We do not discriminate based upon race, color, religion, sex, sexual orientation, age, national origin, disability status, protected veteran status, gender identity or any other characteristic protected by federal, state or local laws.