Job Summary
DevSecOps Engineer
Platform Team
About the product
We build an AI-powered application security platform. It reads source code, finds security vulnerabilities, and then produces a fix that a person reviews and approves. Customers install it and run it inside their own cloud environment. The stack is Python (Langgraph, FastAPI, Pydantic V2), TypeScript, React, PostgreSQL, Kubernetes and the major cloud platforms.
About the role
You'll own how the product is packaged, deployed, upgraded and observed inside a customer's own infrastructure, including restricted setups with limited or no external network access. You'll also own the security posture work: isolation guarantees, least-privilege access, supply chain hardening, and the evidence behind each of those claims.
Key Responsibilities
What you'll do
- Own the deployment packaging, the installation experience, and the upgrade path between versions.
- Make the system operable: health checks, structured logging, metrics and cost visibility.
- Harden the build and release supply chain.
- Coordinate external penetration testing and pull together security compliance evidence.
- Work with the Technical Lead to lift the current scaling constraints safely.
Skill Requirements
What we're looking for
- Production Kubernetes experience, including writing deployment packaging rather than only consuming it.
- You've shipped software that other organisations installed and operated themselves.
- A practical grasp of container and workload isolation, including where it stops holding.
- Upgrade and migration safety for stateful systems: rollback, zero-downtime deployment and concurrent-start behaviour.
- Supply chain security in practice: artifact provenance, dependency pinning, secret handling and least privilege by default.
- Infrastructure as code, and real depth in at least one major cloud platform.
- Kubernetes + Helm and Docker/compose, Terraform, GitHub Actions, LGTM observability
Nice to have
- Delivery into restricted, regulated or disconnected environments.
- SOC 2, ISO 27001 or similar, seen from the engineering side.
- Incident response experience, including writing postmortems.
Other Requirements
How we hire
A short introductory conversation, a practical exercise based on the kind of work you'd actually do, a session where we talk through what you built, and a conversation about working style and how you handle disagreement. We share the format in advance, and take-home exercises are timeboxed.