Secure internal systems and software development processes through least-privilege access, employee onboarding and offboarding, MDM oversight, technology reviews, vulnerability remediation, security automation, infrastructure as code, incident response, documentation, and security training. The role also participates in on-call support and helps develop scalable security controls across Linux-based infrastructure, AWS, and code.
MEET CASA
Casa is the secure home for your bitcoin. We’re the leading provider of Bitcoin self-custody solutions, the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships.
THE ROLE
Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. It will also be a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.
The successful candidate has experience developing scalable security controls and approaches in accordance with industry standards.
Compensation: $125,000-155,000 USD
WHAT YOU'LL DO:
- Handle internal security requests and make sure employees have the tools and access they need without over-provisioning
- Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles
- Onboard and offboard employees across internal systems
- Oversee our MDM system and stay on top of alerts
- Review and assess new technologies (tools, code frameworks, third-party providers, internal apps) through a security lens
- Help shape and refine security best practices across the org
- Triage and work through vulnerabilities surfaced by pen testing, static analysis, responsible disclosures, and automated alerts
- Keep security documentation and training materials fresh and useful
- Automate security processes and alerts wherever you can find the leverage
- Participate in a shared on-call rotation for critical production security issues
- Stay abreast of the latest security events and trends
- Participate in regular security training and certification acquisition
- Ensure our software development lifecycle remains secure as we continue to evolve its processes.
- Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools
- Stay current on emerging threats, security trends, and what's happening across our stack and industry
- Investigate and resolve infrastructure incidents to keep things running smoothly
WHO YOU ARE:
- You have security certifications or equivalent real-world experience
- You think like an attacker, and a hacker mindset is genuinely how you approach problems
- Deep background across multiple facets of security
- 5+ years implementing security in Linux-based infrastructures, AWS, and code
- Comfortable with open-source tooling, cloud environments, and multiple operating systems
- Experience building security solutions that actually scale
- Hands-on with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning
- Familiar with hardening AI tooling to prevent security incidents
- Strong communicator who can present findings to both technical and non-technical audiences
- Bonus points for experience or genuine interest in cryptocurrency / cryptography
WHY CASA?
At Casa, our mission is to empower individuals to secure their digital sovereignty, and we empower our employees to do their best work.
- Ownership. Private key management is the beginning of a future you can truly own, and at Casa, everyone has a role. We offer equity opportunities so our employees can benefit from what we are building together
- Community. Inclusivity is important to us. We value each other and our contributions. Our team, known as the Casa Space Fleet, brings out the best in everyone while having plenty of fun along the way
- Rest and Relaxation. We believe in the power of personal time, so we offer as much flexible time as you need. We encourage you to take at least 3 weeks off a year
- Health Benefits. We provide medical coverage with FSA options, dental, vision, and access to mental health providers
- Setup for Remote Success. Our team is both decentralized and effective. We reimburse up to $400 for anything you need to set up your home office
- Investment Avenues. We partner with resources so you can invest a portion of your paycheck in Bitcoin, and we also have the more traditional 401(k) option
- Maternity/Paternity Leave. We provide 12 weeks for maternity / 4 weeks for paternity
*As Casa is a fully remote company hiring candidates around the world, our perks and benefit packages may adjust based on your location
Casa is an Equal Employment Opportunity (EEO) employer and welcomes all qualified applicants. Applicants will receive fair and impartial consideration without regard to race, sex, color, religion, national origin, age, disability, veteran status, genetic data, or other legally protected status
Similar Jobs
Software
Lead DevSecOps role focused on embedding application security into the SDLC: implement SAST/DAST/SCA and secrets management, secure Azure deployments, integrate security into CI/CD, manage vulnerabilities and compliance, mentor teams, and automate secure infrastructure with IaC (Terraform).
Top Skills:
Api SecurityAquaAzureAzure DevopsAzure Key VaultAzure Security CenterBlack DuckBurp SuiteCheckmarxCi/CdDastGithub Advanced SecurityHashicorp VaultMendMicroservicesOwasp ZapPrisma CloudSastScaSecrets ManagementSemgrepSnykSonarqubeTerraformVeracodeWiz
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Lead DevSecOps engineer on the Infrastructure and Platform Services team responsible for implementing and operating global SaaS infrastructure security. Duties include file integrity monitoring, automating audit evidence collection, hardening base images, securing containerized applications, release automation, incident response via on-call rotation, and collaborating with engineering and cybersecurity to meet compliance (FedRAMP, ISO, SOC) and remediation SLAs.
Top Skills:
AWSAzureChefContainerizationFile Integrity MonitoringIdsIpsJenkinsPuppetPythonRubySIEMSirpTerraformWaf
Information Technology • Software
Architects and implements secure AWS-based CI/CD infrastructure, manages Kubernetes and container platforms, deploys infrastructure as code, and embeds security automation throughout the software development lifecycle. Responsibilities include vulnerability and secrets management, security scanning, compliance and hardening, IAM and network security, monitoring, audit logging, incident response, and collaboration with development and operations teams. The role also requires troubleshooting, documentation, stakeholder communication, and occasional travel or on-call support.
Top Skills:
AlbAnchoreAnsibleApigeeAquaAWSAws Certified Solutions ArchitectAws Secrets ManagerAws Security SpecialtyAzure Security EngineerBashCehCheckmarxChefCis BenchmarksCisspCkaCloudwatchDockerEc2EcsEksElk StackFedrampGitGithub ActionsGitlab CiGoGrafanaIamJenkinsJSONKubernetesLambdaNistOpentofuOwasp ZapPkiPodmanPrometheusPuppetPythonRdsS3Security+SonarqubeStigTalendTerraformTerraform AssociateTrivyTwistlockVaultVpcWafYaml
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
