Sr DevSecOps Engineer

Notability; San Francisco (CA); Hybrid; USD 185,000 - 243,000; Full time

Benefits offered by this job

Competitive compensation

Stock Options

Comprehensive healthcare

Flexible work schedules

401k matching

Home workstation reimbursement

Job summary

A technology company in San Francisco is searching for a Sr DevSecOps Engineer to enhance their cloud infrastructure and security. The role involves responsibilities such as designing and maintaining cloud systems, implementing network security controls, and monitoring for threats. Candidates should have 5+ years of experience in DevSecOps and knowledge of security tools. The position offers a hybrid work model with competitive compensation and a range of benefits that support work-life balance.

Qualifications

• 5+ years of experience in DevSecOps, SRE, or infrastructure engineering.
• Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs).
• Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR).
• Extensive knowledge of secure best practices for Cloud-based Infrastructure.

Responsibilities

• Design, implement, and maintain cloud infrastructure (GCP).
• Build and optimize CI/CD pipelines for automated testing and deployment.
• Implement network security controls, including firewalls, VPNs, and segmentation.
• Monitor systems for security threats and respond to incidents.

Skills

DevSecOps

Infrastructure Engineering

Network Security

Cloud Infrastructure

Scripting (Python, Bash, Go)

Security Tools

Observability Tools

Tools

Prometheus

Grafana

PagerDuty

Job description

Join Notability and shape the future of learning. We’re building the next generation of tools designed not just to capture notes, but to fundamentally improve how people learn, think, and collaborate. Our app brings the natural expressiveness of paper into the digital age, empowering millions of students, educators, and professionals worldwide to organize their ideas, deepen their understanding, and achieve their goals. Our mission is simple: we help you learn.

As part of our team, you’ll help create experiences driven by empathy, exceptional design, and the belief that great ideas can come from anywhere—including you. Come help us make learning better for everyone.

We're looking for a Sr DevSecOps Engineer with strong network security expertise to help build, secure, and maintain our cloud infrastructure. You'll build infrastructure automation, CI/CD pipelines, and defensive security measures to ensure our systems are reliable, scalable, and secure.

What You'll Do

• Design, implement, and maintain cloud infrastructure (GCP)
• Build and optimize CI/CD pipelines for automated testing and deployment
• Implement network security controls, including firewalls, VPNs, and segmentation
• Monitor systems for security threats and respond to incidents
• Conduct security audits and implement remediation measures
• Implement observability solutions (logging, metrics, tracing, alerting)
• Collaborate with development teams on secure architecture decisions
• Optimize cloud costs and resource utilization
• Maintain disaster recovery and backup strategy

What You Need

• 5+ years of experience in DevSecOps, SRE, or infrastructure engineering
• Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs)
• Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR)
• Extensive knowledge of secure best practices for Cloud based Infrastructure
• Proficiency in scripting (Python, Bash, Go)
• Experience with infrastructure as code, automation, and scalable security practices
• Broad security knowledge to connect domains and identify holistic ways to decrease threat surface
• Strong grasp of offensive security to anticipate risks from an adversary's perspective, not just compliance boxes
• Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, PCI-DSS)
• Proficiency with monitoring and observability tools (Prometheus, Grafana, PagerDuty)
• Knowledge of secrets management and identity/access management
• Experience with modern application stacks, infrastructure, and security tools to implement pragmatic defenses
• Experience with vulnerability management and threat hunting

Bonus Points

• Experience with Typescript and SQL
• Security certifications (CISSP, CEH, AWS Security Specialty)
• Experience with zero-trust architecture
• Background in penetration testing or vulnerability assessment

For this position we are targeting a base pay between $185,000–$243,000. Actual compensation offered will be determined by factors such as job-related knowledge, skills, and experience.

This role follows a hybrid model, with a minimum of two days onsite at our downtown San Francisco office and flexibility to work remotely from home the rest of the week.

How We Work

Each member contributes to all parts of our products. We trust each other to make decisions independently while also considering shared goals and values.

When We Work

We actively promote work-life balance with flexible schedules and an “as long as you get your work done” approach to time off.

Why You'd Love Working Here

We work near Market Street, close to public transit. Our office offers height‑adjustable desks, spacious conference rooms, and a well‑stocked kitchen.

Benefits

• Competitive compensation that includes base salary, bonuses, and profit sharing
• Equity awards in the form of Stock Options
• Comprehensive healthcare fully covered for you and your family
• Flexible work and vacation schedules
• 401k with matching contributions
• Matching gifts to nonprofits
• Lunch stipend (when working from HQ)
• Public transit stipend
• Home workstation reimbursement
• ISP stipend
• Monthly phone bill stipend

Notability is proud to be an Equal Opportunity employer committed to diversity and inclusivity in the workplace. All aspects of employment are decided on the basis of merit, qualifications, and business needs. We do not discriminate based upon race, color, religion, sex, sexual orientation, age, national origin, disability status, protected veteran status, gender identity or any other characteristic protected by federal, state or local laws.