Intermediate SecOps Engineer

TextNow
Summary
Join TextNow, the nation's largest free phone service provider, and become a key member of our SecOps team. We're on a mission to democratize communication, and you'll play a vital role in securing our infrastructure and enabling automated responses. You will design, implement, and maintain security-focused infrastructure, develop and enforce security best practices using various tools, and participate in incident response. Collaboration with engineering and compliance teams is crucial to integrate security best practices throughout the SDLC. This position requires 3+ years of experience in SecOps, SRE, or DevSecOps, proficiency with AWS and various security tools, and a strong understanding of incident response and threat management. TextNow offers a strong work-life blend, flexible work arrangements, employee stock options, unlimited vacation, competitive pay and benefits, parental leave, and wellness programs.
Requirements
- Experienced in SecOps & SRE: You have 3+ years of experience in Security Operations, Site Reliability Engineering, or DevSecOps, with a strong understanding of cloud security, system reliability, and automation
- Hands-On with Security Tools & Cloud Platforms: Proficient with AWS security services, GitHub security controls, Terraform for secure infrastructure provisioning, and Ansible for automated security configurations
- Incident Response & Threat Management: Experienced in handling security incidents, analyzing threats, and implementing remediation strategies to improve system defenses
- Proactive in Security Monitoring & Hardening: Strong background in logging, monitoring, and anomaly detection using tools like SIEMs, intrusion detection systems (IDS), and cloud-native security solutions
- Experience working with development teams to integrate security best practices into the SDLC (e.g., static and dynamic code analysis)
- Collaborative & Security-Minded: Passionate about working with engineering teams to embed security into CI/CD pipelines, enforce security policies, threat modeling, and risk assessments, and drive a security-first mindset across the organization
Responsibilities
- Ensure Secure & Reliable Systems: Design, implement, and maintain security-focused infrastructure to protect TextNow’s services while ensuring reliability and scalability
- Security Automation & Infrastructure as Code: Develop and enforce best practices using Terraform, Ansible, Crowdstrike, and AWS security tools, ensuring secure configurations, automated compliance checks, and infrastructure as code
- Threat Detection & Incident Response: Participate in an on-call rotation to respond to security incidents, investigate vulnerabilities, and implement proactive measures to prevent future threats. Work closely with engineering teams to remediate security risks
- Monitoring & Logging for Security: Improve observability by implementing security monitoring solutions, logging best practices, and alerting mechanisms to detect anomalies and suspicious activity
- Access Control & Identity Management: Manage IAM roles, permissions, and policies to ensure least privilege access and enforce security controls across cloud and internal systems
- Collaboration & Security Advocacy: Work with DevOps, engineering, and compliance teams to integrate security best practices into the software development lifecycle (SDLC) and promote a security-first culture
- Continuous Security Improvement: Identify and mitigate security vulnerabilities, conduct security assessments, and implement automated security scanning and hardening techniques
Benefits
- Strong work life blend
- Flexible work arrangements (wfh, remote, or access to one of our office spaces)
- Employee Stock Options
- Unlimited vacation
- Competitive pay and benefits
- Parental leave
- Benefits for both physical and mental well being (wellness credit and L&D credit)
- We travel a few times a year for various team events, company wide off-sites, and more