Senior Security Platform Engineer - Secure Delivery

Ashby is looking for a Senior Security Platform Engineer - Secure Delivery (also advertised as Senior DevSecOps Engineer). Reporting directly to the Head of Security, you will join a security team dedicated to making Ashby's delivery pipeline secure by default across application code, infrastructure, dependencies, containers, and product configuration.

Ashby offers an environment with seed-stage autonomy (almost-no-meeting culture, direct impact) paired with growth-stage scale (tens of thousands of daily users, high-profile customers like Notion, Linear, Shopify, and Snowflake).

Role Overview

Your mission is to build the secure-delivery capabilities that other engineers use every day. You’ll turn security requirements into reliable integrations, useful feedback, and self-service workflows that work seamlessly across production repositories.

You will treat engineers as your primary users and own the operation and reliability of what you ship.

What You'll Do

• Integrate Delivery Security Tooling: Deploy, configure, integrate, and tune static analysis, dependency, secret, container, and Infrastructure as Code (IaC) scanning in CI/CD workflows.
• Inventory & Delivery Paths: Map production repositories and delivery pipelines (including prompts and model configurations), keeping scanner coverage distinct from application-specific AI tests.
• Policy Enforcement: Roll out new checks in report-only mode initially, transitioning to agreed warn/block policies based on exploitability, exposure, and compensating controls.
• Self-Service Workflows: Enable engineers with self-service exception workflows tied to documented rules, clear ownership, justifications, expiries, and audit trails.
• Automation & AI: Build automation and AI-assisted workflows that enrich findings, propose fixes, and support Product Engineering triage while maintaining required review and rollback standards.
• Telemetry & Visibility: Expose metrics around coverage, integration failures, finding age by risk, time to remediate, false blocks, build delays, and bypasses. Connect useful telemetry to GRC evidence.
• Cloud Posture & Foundations: Partner with Infrastructure on cloud-posture monitoring, misconfiguration alerting, bounded remediation automation, and artifact provenance.

Technology & Tools

• CI/CD & Automation: Experience with GitHub Actions (or comparable platforms), Terraform, containers, and cloud security controls.
• Languages: Comfortable writing production automation in TypeScript, Python, Go, or similar languages.

Qualifications

• Experience building and operating CI/CD, developer tooling, or infrastructure automation used by software engineers.
• Ability to write maintainable code, explain failure modes of shipped tools, and make practical rollout decisions based on security evidence.
• Practical experience applying AI in engineering workflows with clear strategies for checking AI outputs and permissions.
• A product mindset: treating internal engineers as customers, driving adoption, making pragmatic build-vs-buy decisions, and maintaining operational reliability.

Interview Process

1. Recruiter Screen (30 mins)
2. Hiring Manager Intro Call (20 mins)
3. Past Projects Deep Dive (45 mins)
4. Founder Screening (45 mins)
5. Take-Home Assessment + Practical Review (1 hr review; ~2-3 hrs on assignment)
6. Cross-Functional Stakeholder Interview (45 mins)

Benefits & Compensation

• Competitive base salary and equity (with a 10-year exercise window for stock options).
• Unlimited PTO (with proactive encouragement to take time off).
• Minimum 12 weeks of fully paid parental leave.
• Generous equipment, software, and home office furniture budget.
• $100/month education budget (plus approval for major conferences).
• Top-tier, 100% company-covered health insurance for you and your dependents.