DevSecOps Engineer - Casa

About Casa

Casa is the secure home for your bitcoin. We’re the leading provider of Bitcoin self-custody solutions, offering the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships.

The Role

Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. You will have a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.

What You'll Do

• Handle internal security requests and ensure employees have the tools and access they need without over-provisioning.
• Maintain least-privilege access principles across all internal tools and systems.
• Manage onboarding and offboarding for employees across internal systems.
• Oversee the MDM system and monitor alerts.
• Review and assess new technologies (tools, code frameworks, third-party providers, internal applications) through a security lens.
• Help shape and refine security best practices across the organization.
• Triage and remediate vulnerabilities surfaced by penetration testing, static analysis, responsible disclosures, and automated alerts.
• Maintain and update security documentation and training materials.
• Automate security processes and alerts wherever feasible.
• Participate in a shared on-call rotation for critical production security issues.
• Stay abreast of emerging security events, trends, and threat vectors.
• Participate in regular security training and certification acquisition.
• Ensure our software development lifecycle remains secure as processes evolve.
• Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools.
• Investigate and resolve infrastructure incidents to maintain system reliability.

Who You Are

• Security certifications or equivalent real-world experience.
• Attacker mindset and a proactive approach to security challenges.
• Deep background across multiple facets of security.
• 5+ years of experience implementing security in Linux-based infrastructures, AWS, and application code.
• Comfortable working with open-source tooling, cloud environments, and multiple operating systems.
• Proven track record of building scalable security solutions.
• Hands-on experience with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, or vulnerability scanning.
• Familiarity with hardening AI tooling to prevent security incidents.
• Strong communication skills with the ability to present findings to technical and non-technical audiences.
• Bonus points for experience or genuine interest in cryptocurrency and cryptography.

Why Casa?

• Ownership: Equity opportunities to share in our collective success.
• Flexible Time Off: Flexible PTO policy with a minimum recommendation of 3 weeks off per year.
• Health Coverage: Medical (with FSA options), dental, vision, and mental health coverage.
• Home Office Setup: Up to $400 reimbursement for your remote workspace.
• Retirement & Investment: 401(k) retirement plan and options to invest a portion of your paycheck into Bitcoin.
• Parental Leave: 12 weeks of paid maternity leave and 4 weeks of paid paternity leave.