SlipstreamJobsFresh Startup & VC-Backed Jobs

DevSecOps Engineer

Casa - Remote - Remote - posted 2026-06-30

Apply on the company site

SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.

Salary: USD 125,000 - 155,000 / annual

Casa is seeking a DevSecOps Engineer to join its Security team, reporting to the Chief Security Officer. This role is central to securing Casa's Bitcoin self-custody platform, customer data, and company infrastructure. You will own a broad security mandate spanning infrastructure hardening, identity and access management, vulnerability management, and security automation. Key responsibilities include: - Managing internal security requests and access provisioning using least-privilege principles - Onboarding and offboarding employees across systems - Overseeing Mobile Device Management (MDM) systems and responding to alerts - Evaluating new technologies, tools, frameworks, and third-party providers through a security lens - Triaging and resolving vulnerabilities from penetration testing, static analysis, responsible disclosures, and automated scanning - Automating security processes and alerts using infrastructure-as-code (Terraform, Ansible) - Maintaining security documentation and training materials - Participating in on-call rotation for critical production security incidents - Ensuring the software development lifecycle remains secure as processes evolve - Investigating and resolving infrastructure incidents - Staying current on emerging threats and industry trends, with particular attention to cryptocurrency security You bring 5+ years of hands-on security experience in Linux-based infrastructures, AWS, and application code. You have deep expertise across multiple security domains: penetration testing, threat modeling, code analysis, system hardening, distributed patching, and vulnerability scanning. You're comfortable with open-source tooling, cloud environments, and multiple operating systems. You think like an attacker and approach problems with a genuine hacker mindset. You communicate complex security findings clearly to both technical and non-technical audiences. Bonus: experience or genuine interest in cryptocurrency and cryptography.

Similar roles