Apply on Employer Site

SandboxAQ · 1 day ago

Staff DevSecOps & Infrastructure Engineer

United States

Contract

Remote

Lead/Staff

$175K/yr - $269K/yr

SandboxAQ is a high-growth company delivering AI solutions that address some of the world's greatest challenges. The Cybersecurity Group is looking for a Staff DevSecOps & Infrastructure Engineer to build and embed security into their infrastructure and product lifecycle.

Artificial Intelligence (AI)Cyber SecurityInformation TechnologyQuantum ComputingSaaS

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design and implement secure CI/CD pipelines by integrating security testing tools such as SAST, DAST, SCA, and vulnerability scanning

Automate security processes and controls throughout the software development lifecycle to ensure high-quality, secure deliverables

Build and maintain secure, scalable architecture for AWS and on-premise deployments using Infrastructure as Code (IaC) principles

Lead vulnerability management and remediation through security reviews, risk assessments, code audits, and incident response planning

Champion a culture of security by mentoring developers on secure coding practices and contributing to FedRAMP compliance efforts

Qualification

AWSInfrastructure as CodeCI/CD pipelinesDockerKubernetesPythonBashFedRAMPSOC 2ISO 27001CrowdstrikeRapid7SnykAnsiblePuppetOSCPKafkaKstreams

Required

US Citizenship and/or security clearance is required due to USG contract requirements

Extensive experience with AWS and implementing security controls in cloud-native and large-scale distributed systems

Proficiency in container orchestration using Docker and Kubernetes

Proven Infrastructure as Code (IaC) expertise using Terraform to define secure infrastructure and manage CI systems

Strong scripting skills in languages such as Python or Bash, with hands-on experience integrating security tools into CI/CD pipelines

Preferred

Experience with FedRAMP, SOC 2, or ISO 27001

Experience with enterprise tools like Crowdstrike, Rapid7, or Snyk

Familiarity with Bazel and configuration management tools like Ansible or Puppet

Experience or certifications such as OSCP

Familiarity with Kafka and Kstreams

Benefits

Comprehensive medical, dental, and vision coverage for employees and dependents with generous employer premium contributions

Retirement savings with company matching

Paid parental leave

Inclusive family-building benefits

Flexible paid time off

Company-wide seasonal breaks

Support for flexible work arrangements that enable sustainable performance

Opportunities for continuous learning and growth through on-the-job development, cross-functional collaboration, and access to internal learning and development programs