overflow - DevSecOps Engineer
Requirements
• Core Experience: 5+ years in DevOps, Site Reliability, or Cloud Platform roles • Cloud Expertise: Deep, hands-on experience with Docker and AWS ECS Fargate • CI/CD Automation: Extensive experience building and maintaining robust deployment pipelines using GitHub Actions. • Security & Compliance: Practical experience maintaining SOC 2 technical controls and a strong understanding of the architectural requirements for PCI-DSS (ideally Level 1) compliance. • IT'D BE NICE IF YOU HAD • Startup DNA / Founding Experience: Previous experience as the first DevOps or SRE hire at a high-growth startup, comfortable taking ownership of the 0-to-1 platform build. • Fintech & Web3 Context: While not a day-one requirement, experience securing financial ledger systems, payment gateways, or blockchain/crypto infrastructure will be increasingly valuable as our platform evolves. • Offensive Security Knowledge: Experience participating in bug bounties, conducting internal threat modeling, or a strong understanding of the OWASP Top 10.
Responsibilities
• Cloud Infrastructure & Platform Security • Secure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management. • Refine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices. • Deploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents. • Secure CI/CD & Developer Enablement • Own and optimize our continuous integration and deployment (CI/CD) pipelines. • "Shift Left" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow. • Act as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training. • Compliance & Data Governance • Action on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations) • Partner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments. • Ensure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.
Benefits
• Overflow's compensation philosophy is rooted in Carta Total Compensation benchmarks, ensuring pay that is competitive by role, geography, and function. Total compensation may also include equity, performance-based bonuses (for eligible roles), and a comprehensive benefits package. • Competitive base salary with equity eligibility • Medical, dental, and vision coverage for employees and dependents • Generous paid time off and company holidays • Paid parental leave • 401(k) retirement plan • Dedicated mental health and therapy stipend to support personal well-being • Team retreats and intentional in-person gatherings throughout the year
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT