Site Reliability Engineer - Application Security

Join us as we push engineering forward in a world that's changing fast. You'll help us evolve how we build, deploy, and secure software. Embracing new technologies, challenging the status quo, and finding better ways to ship faster without compromising reliability or securityWorking closely with our SRE and development teams, you'll help run and improve our production infrastructure, streamline deployments, investigate production issues, and address security risksYou'll also help build the technical controls that support SOC 2 audits and GDPR complianceOur north star: Become an AI-first engineering team. AI coding agents are a core part of how we build and operate. We use them to write and review Terraform, debug incidents, automate repetitive operational work, and move faster without lowering the bar on quality or securityWe're looking for someone who already works this way, or is excited to: someone who knows how to direct an agent well, check its output with a critical eye, and spot where AI can remove toil from our infrastructure and security workflowsYou'll also help shape how we use AI safely, including guardrails, access controls, and keeping sensitive data protectedOur environment includes AWS, Kubernetes on EKS, Terraform, Terragrunt, GitHub Actions, Prometheus, Grafana, and CloudWatch. Our applications use Ruby on Rails, Vue.Js, and Node.Js, with MySQL, PostgreSQL, and Sidekiq supporting the backendInfrastructure & reliability: Maintain AWS and Kubernetes environments, troubleshoot production issues, and improve availability, performance, and resource usageTerraform & Terragrunt: Build and maintain infrastructure as code, review plans, manage environment configuration, and address infrastructure driftDeployments & developer experience: Improve CI/CD pipelines, deployment automation, release checks, and rollback proceduresMonitoring & incidents: Improve monitoring and alerts, join the on-call rotation, and contribute to incident reviewsApplication security: Work with developers to assess vulnerabilities, review security risks, and validate fixesCI/CD security: Maintain code, dependency, secrets, container, and infrastructure scanningCloud security: Strengthen IAM, secrets management, network controls, and Kubernetes securitySOC 2 & GDPR: Support technical controls, audit evidence, and personal data protectionRecovery: Test backups and recovery procedures, maintain runbooks, and support production readinessCollaboration: Participate in code reviews, document changes, and support application, AI, and data engineering teamsYou'll work closely with SRE and application engineers, and support AI and data initiatives where they depend on shared infrastructureYou'll take part in technical discussions and code reviews, share what you learn, and help improve how we operateReducing recurring incidents, unnecessary alerts, and repetitive manual work is part of the role. We want reliable systems and sustainable operations for the people supporting themBenefits
Hybrid WorkEmployee Stock OptionsPersonal Development BudgetBi-weekly Lunch & LearnMonthly Team-building ActivitiesHealth & Dental CoverageBonus OpportunitiesExtended Vacation Days (34 days of vacation annually, with summer Fridays, and more)Hands-on experience supporting production workloads in AWSYou hold relevant AWS, Kubernetes, Terraform, or security certificationsExperience using logs, metrics, dashboards, and alerts to investigate production problemsWorked with MySQL, PostgreSQL, Redis or Valkey, and SidekiqExperience with GitHub Actions, Argo CD, Helm, Karpenter, or KEDAFamiliarity with IAM, least privilege, secrets management, and encryptionUnderstanding of common web application risks, including broken access control, injection, authentication weaknesses, and sensitive data exposureA solid understanding of Linux, networking, DNS, and TLSFamiliar with securing AI integrations, agent workloads, or MCP servicesSupported services across multiple AWS regionsBuilt useful monitoring with Prometheus, Grafana, or CloudWatchWe're excited to work with someone who's curious about what's next, passionate about continuous improvement, and motivated to turn new ideas into real engineering progressWe value people who ask questions, explain their reasoning, and leave systems easier for others to understandClear communication skills and good judgment about when to work independently, request a review, or escalationExperience with Docker and Kubernetes, including troubleshooting deployments, services, health checks, and resource limitsHelped remediate penetration-test findings or contributed technical evidence to a SOC 2 auditAbility to write automation in Python, Bash, Ruby, JavaScript, or another suitable languageExperience writing and maintaining Terraform modules and Terragrunt configuration, including reviewing plans and working with remote stateExperience at a start up or scale upWorking knowledge of SOC 2 controls and GDPR principles relevant to engineering, including access restrictions, data minimization, retention, and deletionAround 3-5 years of experience in SRE, DevOps, platform engineering, cloud operations, or a related engineering role. Equivalent practical experience is welcomePractical application security experience through vulnerability remediation, secure code review, threat modelling, or security toolingExperience with Git, pull requests, CI/CD pipelines, and deployment workflowsParticipated in backup restoration or disaster recovery exercisesSupported Ruby on Rails or Node.Js applications in production
#J-18808-Ljbffr