CrossFit is hiring a
Senior DevSecOps Engineer

Summary

CrossFit is seeking a highly skilled and experienced Senior DevSecOps Engineer for a remote role. The ideal candidate will have extensive experience with AWS services, Terraform, Python, and security best practices. Responsibilities include designing secure infrastructure, developing automation scripts, leading initiatives, collaborating with cross-functional teams, and conducting continuous improvement activities.

Requirements

• Extensive experience with AWS services, including IAM, VPC, ECS, RDS, Lambda, WAF, Cloud Firewall, and others
• Proficiency with Terraform and Terragrunt for infrastructure as code
• Strong Python programming skills, with experience in automating security and devops processes and developing security tools
• Security Skills: Knowledge of security best practices, threat modeling, security testing, and vulnerability management
• Incident Response: Ability to handle and respond to security incidents and breaches
• Monitoring and Logging: Skills in using monitoring tools like DataDog, Prometheus, Grafana, ELK Stack or Splunk
• Networking Fundamentals: Understanding of network protocols (e.g., TCP/IP, DNS, SMTP, HTTP/HTTPS) and network architecture
• Firewalls and Security Devices: Proficiency with firewall management (both traditional and next-generation) and other security devices like IDS/IPS, VPNs, and DLP systems
• Intrusion Detection and Prevention: Ability to configure and manage intrusion detection systems (IDS) and intrusion prevention systems (IPS)
• Network Monitoring and Traffic Analysis: Experience with tools such as Wireshark, Nagios, or SolarWinds for monitoring network traffic and performance
• Security Information and Event Management (SIEM): Proficiency in using SIEM platforms like Splunk, IBM QRadar, or LogRhythm to analyze security alerts and logs
• Experience with CI/CD pipelines and integrating security tools into the development process
• Excellent problem-solving skills and the ability to work under pressure in a fast-paced environment
• Strong communication skills, with the ability to articulate complex security concepts to technical and non-technical stakeholders

Responsibilities

• Design, implement, and maintain secure AWS cloud infrastructure
• Ensure the security of cloud resources through automated security controls, continuous monitoring, and threat detection
• Lead the development of security policies, procedures, and practices for cloud infrastructure
• Develop and maintain automation scripts and tools using Python to streamline security processes and improve efficiency
• Collaborate with software development teams to integrate security into the CI/CD pipeline, ensuring secure code deployment
• Implement and maintain infrastructure as code (IaC) practices, ensuring consistency and compliance across environments
• Work closely with cross-functional teams, including development, operations, and security, to ensure alignment on security objectives
• Lead incident response efforts for security breaches, including investigation, mitigation, and post-incident analysis
• Stay up-to-date with the latest security threats, technologies, and best practices, and implement improvements where necessary
• Conduct regular security assessments, audits, and penetration tests to identify and address vulnerabilities

Preferred Qualifications

• Relevant certifications such as AWS Certified Security – Specialty, Certified Information Systems Security Professional (CISSP), or similar
• Knowledge of containerization and orchestration tools (e.g., Docker, Kubernetes) and their security implications
• Familiarity with DevOps tools such as GitHub Actions, Jenkins, or similar

Benefits

• Rich Medical, Dental, and Vision plans
• Discretionary Paid Time Off – empowering you to unplug whenever and however you need to
• Flexible spending account and 401(k) with employer matching - vested on day one
• CrossFit Gym Membership Reimbursement
• CrossFit Courses Benefit
• Partnership Perks