Senior DevSecOps Engineer

One of the first dedicated DevSecOps engineers in Justworks' Platform Engineering organisation, which supports more than 300 engineers. The role reports to Platform Engineering with a dotted line to Digital Security leadership and sits between Security, which finds risk, and Engineering, which fixes it. The engineer owns SAST, SCA, secrets and container scanning in GitHub Actions, builds secure-by-default service templates, hardens the supply chain with signing, SBOMs and provenance, enforces Terraform and Kubernetes policy, automates vulnerability routing and remediation, replaces long-lived credentials and pilots AI-assisted code review.

The team wants five or more years in software, infrastructure or security engineering, three of them in AppSec or DevSecOps, plus AWS security services, Kubernetes, Terraform and Go, Python or Ruby. The role is based in New York.