Envoy · 20 hours ago
Member of Technical Staff, Security/DevSecOps
San Francisco, CA
Full-time
Onsite
Senior Level
$205K/yr - $225K/yr
5+ years expEnvoy builds workspace management technology that makes it simple to run secure, compliant, and connected workplaces across every location. They are seeking an experienced Cloud Security / DevSecOps Engineer to harden AWS environments and integrate security into CI/CD pipelines.
Facility ManagementHuman ResourcesOffice AdministrationSoftware
Responsibilities
Design and enhance AWS security controls (IAM, VPC, Security Groups, S3, RDS, Lambda) while deploying and managing native services (GuardDuty, Security Hub, Config, CloudTrail, IAM Access Analyzer) for ongoing detection and compliance
Integrate automated security guardrails into CI/CD pipelines (GitHub Actions) for IaC, container images, and serverless deployments
Leverage and pioneer AI tools (ChatGPT, Claude, GitHub Copilot, etc.) to automate routine security tasks, generate infrastructure code, analyze threat patterns, streamline compliance reporting, accelerate vulnerability assessments, and optimize overall security automation and productivity
Conduct threat modeling and risk assessments (STRIDE or other models) to identify gaps and prioritize mitigations
Automate security compliance reporting against frameworks such as CIS Benchmarks and NIST 800‑53 using IaC and policy‑as‑code (e.g., Open Policy Agent)
Collaborate with infrastructure and product engineering teams to embed security early and unblock delivery velocity
Qualification
Required
Hands‑on expertise securing AWS workloads, multi‑account architectures, and VPC design
5+ Years of Experience
Deep knowledge of IAM policy design, role‑based access control, and least‑privilege enforcement
Experience hardening container images and Kubernetes/EKS clusters, plus familiarity with container runtime security
Strong scripting skills in Python, Go, or similar for automation and tooling integration
Experience performing security risk assessments and threat modeling for new services
Familiarity with AWS security tooling (GuardDuty, Config, Security Hub, Macie, Access Analyzer)
Excellent written and verbal communication skills and the ability to educate engineers on secure practices
Autonomous and highly organized, thriving in a fast‑moving environment
Passionate about enabling secure cloud engineering without blocking developer velocity
Intellectually curious, always experimenting with new cloud security tooling and best practices
A clear, concise communicator who can translate complex security topics for diverse stakeholders
Preferred
A desire to learn Terraform and implement IaC security scans in CI/CD
Benefits
A high degree of trust in your ideas and execution
An opportunity to partner and collaborate with other talented people
An inclusive community where you feel welcomed and cared for as a person
The ability to make an immediate impact helping customers create a great workplace experience
Support for your personal and professional growth
Access to cutting-edge AI tools and platforms, with encouragement to experiment and implement AI solutions in your daily work
Company
Envoy
Envoy transforms modern workplaces with innovations that make office life and work more meaningful.
201-500 employees
H1B Sponsorship
Envoy has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (9)
2024 (7)
2023 (8)
2022 (12)
2021 (7)
2020 (8)
Funding
Current Stage
Growth StageTotal Funding
$170.15MKey Investors
Brookfield GrowthMenlo VenturesAndreessen Horowitz
2021-12-30Series C· $111M
2018-10-23Series B· $43M
2015-06-23Series A· $15M
Leadership Team
Larry Gadea
CEO and Founder
Sinohe Terrero
Chief Financial Officer and COO
Recent News
Menlo Ventures
2025-12-29
PCMag Australia
2025-11-09
Morningstar.com
2025-10-23
Company data provided by crunchbase