Campminder · 2 weeks ago
Senior DevSecOps Engineer
United States
Full-time
Remote
Senior LevelCampminder is a company that builds software for summer camps, focusing on digital transformation and data security. As a Senior DevSecOps Engineer, you will be responsible for architecting and hardening security infrastructure, managing compliance programs, and integrating security practices into the development lifecycle.
Software
No H1B
Responsibilities
Partner with the DevOps team to Integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and drive remediation before code reaches production
Configure, tune, and harden WAF rules across our web applications
Partner with platform and IT to implement and maintain EDR, DLP, vulnerability scanning and remediation, and SIEM/XDR tooling across servers and endpoints
Manage secrets and credentials in build pipelines, including vault-based storage, rotation, and least-privilege service accounts
Execute PCI, SOC2, and ISO technical controls: SAQ completion, quarterly ASV scans, and disaster recovery implementation
Harden containerized and cloud-native environments, including image scanning and Kubernetes configuration
Coordinate pen testing engagements and drive remediation against SLA timelines
Run security awareness training programs (KnowBe4, Security Journey) and maintain AI usage oversight, including approved tooling, code-gen governance, and supply-chain monitoring
Qualification
Required
Experienced in security engineering or DevSecOps, with hands-on ownership of both pipeline-level and infrastructure-level security
Experience configuring IAM and SSO platforms (Okta, Auth0) alongside cloud-native identity controls like Azure conditional access
Comfort embedding security directly into CI/CD workflows through security and dependency scanning tooling, secrets management, and policy-as-code
A track record of hardening containerized and cloud-native environments, including Kubernetes and image scanning
Experience executing PCI, SOC2 or similar compliance technical controls (scans, SAQs, evidence prep); program ownership isn't required, but you know how to translate auditor requirements into engineering work
Familiarity administering centralized cybersecurity solutions, endpoint security, and data loss protection
Strong judgement on how to balance security risk with employee experience and velocity, how to build trust through balanced approaches to security risk mitigation, and knowledge of when to escalate versus fix directly
Experience running or supporting security awareness and training programs
Exposure to AI tooling governance, such as MCP inventories, code-gen release gating, or supply-chain monitoring for AI-assisted development
Strong communication skills, with the ability to communicate technical concepts to technical and non-technical people
A track record of working collaboratively with engineers and supporting them in learning and implementing security best practices
A track record of empowering delivery teams to move quickly and unblock themselves
A growth-oriented mindset
Benefits
Robust medical, dental, and vision coverage options with generous employer contributions
$500 employer HSA contribution for HSA-compatible plans
Ability to choose where you work - remotely, in the office, or a mix!
A variety of resources to support mental health and emotional well-being
12 weeks of 100% paid parental leave for all new parents, including via adoption, surrogacy, and foster care
401(k) with 4% company matching
Trust-Based (flexible) PTO (and yes, we use it!)
$900/year wellness allowance
Company-paid subscriptions, training, and support for using AI professionally and personally.
We have a team dedicated to enabling our AI capabilities for our team members and our customers!
Company
Campminder
CampMinder is a web-based camp management and communication system designed by former campers, staff, and you - the camp professional.
Founded in 2001
51-200 employees
Funding
Current Stage
Growth StageLeadership Team
Dan Konigsberg
Founder & CEO
Recent News
Outside Magazine
2023-12-20
2023-12-20
Company data provided by crunchbase