Senior DevSecOps Engineer - Ashby

About Ashby

Ashby gives you the best of both early and growth-stage environments: the agency and no-nonsense of a seed startup paired with the product-market fit and scale of a growth-stage company. We have tens of thousands of daily users across notable customers like Notion, Linear, Shopify, and Snowflake, tens of millions in ARR growing >100% year-over-year, and years of runway.

We operate with an almost-no-meeting culture and offer deep agency to contribute to meaningful projects.

Role Overview

We’re looking for a Senior DevSecOps Engineer (also advertised as Senior Security Platform Engineer - Secure Delivery) with a passion for building "paved roads" that make secure software delivery part of how we build and ship software.

Your mission is to make our delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration. You’ll own the technical implementation and operation of delivery-security tooling and controls, including integration, configuration, tuning, reliability, and coverage.

Responsibilities

• Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows.
• Inventory production repositories and delivery paths, keeping scanner coverage distinct from application-specific test suites.
• Roll out new checks in report-only mode before transitioning to warn and block policies backed by exposure and exploitability metrics.
• Provide self-service exception workflows with documented justifications, owners, expiries, and audit trails.
• Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering's triage.
• Make key security metrics visible (coverage, build delay, time to triage, finding age, false blocks, and bypasses).
• Collaborate with Infrastructure on cloud-posture monitoring and critical misconfiguration alerts.
• Extend into shared-image hardening and artifact provenance as delivery foundations mature.

What We're Looking For

• Experience building and operating CI/CD pipelines, developer tooling, or infrastructure automation.
• Proficiency in TypeScript, Python, Go, or a comparable language for writing production automation.
• Familiarity with GitHub Actions (or equivalent), Terraform, containers, and cloud security controls.
• Experience applying AI in engineering workflows while maintaining strict checks on outputs and permissions.
• Ability to treat internal engineers as users and evaluate build vs. buy decisions with practical rollout empathy.

Interview Process

1. Recruiter Screen – 30 mins
2. Hiring Manager Intro Call – 20 mins
3. Past Projects Deep Dive – 45 mins
4. Founder Screening – 45 mins
5. Take-Home Assessment + Practical Review – 1 hr review (2–3 hrs spent on take-home)
6. Cross-Functional Stakeholder Interview – 45 mins

First 3 Months Milestones

• Month 1: Map production delivery paths and scanning gaps across code, infrastructure, prompts, and configurations.
• Month 2: Deliver a bounded scanning integration (e.g., secret push protection or report-only static analysis) with a functional finding workflow.
• Month 3: Establish initial warn, block, and self-service exception rules with clear engineering ownership and baselined coverage metrics.

Benefits

• Competitive base salary and equity (with a 10-year option exercise window).
• Unlimited PTO (with explicit encouragement to take time off).
• Minimum 12 weeks of fully paid parental leave.
• Generous budget for equipment, software, and home office setups.
• $100/month continuous education budget (with conference sponsorships).
• Fully covered health insurance premiums for employees and dependents (US & international equivalents).