About the Role

Ashby is looking for a Senior DevSecOps Engineer (also advertised as Senior Security Platform Engineer - Secure Delivery) to join the Security team. In this role, your focus is on building "paved roads" specifically around making secure delivery part of the way software is built and shipped. You’ll operate the checks and workflows around our delivery pipeline, help engineers act on findings, and make routine exceptions straightforward under agreed policies.

Your mission is to make the delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration. You’ll own the technical implementation and operation of delivery-security tooling and controls, including integration, configuration, tuning, reliability, and coverage.

Key Responsibilities

Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code scanning in CI/CD workflows.
Inventory production repositories and delivery paths, including prompts and model configuration.
Roll out new checks initially in report-only mode, then implement agreed warn and block policies based on exploitability, exposure, and compensating controls.
Provide self-service exception workflows for engineers within documented rules, including ownership, justification, expiry, and audit trails.
Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering triage.
Provide visibility into coverage, integration failures, finding age by risk, time to triage/remediate, false blocks, build delay, and bypasses.
Work with Infrastructure on cloud-posture monitoring, misconfiguration alerts, and bounded remediation automation.
Extend capabilities into shared-image hardening and artifact provenance as delivery foundations mature.

Requirements & Qualifications

Experience building and operating CI/CD, developer tooling, or infrastructure automation used by other engineers.
Ability to write maintainable code (TypeScript, Python, Go, or comparable language) and explain failure modes of shipped tools.
Familiarity with CI/CD systems (such as GitHub Actions), Terraform, containers, and cloud security controls.
Experience applying AI in engineering workflows with clear verification of outputs and permissions.
Strong user-focused mindset treating internal engineers as primary users.

Interview Process

Recruiter Screen (30 mins)
Hiring Manager Intro Call (20 mins)
Past Projects Deep Dive (45 mins)
Founder Screening (45 mins)
Take-Home Assessment + Practical Assessment Review (1 hr review; 2-3 hrs on assignment)
Cross-Functional Stakeholder Interview (45 mins)

Benefits

Competitive salary and equity with a 10-year exercise window for stock options.
Unlimited PTO.
Minimum of 12 weeks fully paid parental leave.
Generous equipment, software, and office furniture budget.
$100/month education budget (with conferences covered upon approval).
100% company-paid health insurance coverage for you and your dependents.

Senior DevSecOps Engineer - Ashby