SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 188,000 - 242,000 / annual
Justworks is seeking a Senior DevSecOps Engineer to join the Platform Engineering team in New York. This is a foundational role as one of the first dedicated DevSecOps engineers supporting 300+ engineers across the organization.
You will own security automation across CI/CD pipelines (GitHub Actions), implementing SAST, SCA, secrets detection, and container scanning. You'll build security into golden path templates for Go, Rails, and Vue.js services to ensure new services start secure by default. Your responsibilities include hardening the software supply chain through dependency management, artifact signing, SBOM generation, and provenance tracking.
You will implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement to catch misconfigurations before deployment. You'll coordinate vulnerability exposure remediation across Engineering, build automation to route findings to owning teams with context, and own implementation of secrets management patterns to eliminate long-lived credentials in favor of short-lived, federated identity.
Additional responsibilities include partnering with the Security team on cloud security posture across AWS environments, supporting agentic penetration testing rollout, exploring AI-assisted security review of code changes, and driving adoption through documentation and developer education. You'll measure key metrics including time-to-remediate, scan coverage, secrets findings, and mean time to patch.
This role reports to Platform Engineering with a dotted line to Digital Security leadership. You'll work alongside Developer Experience and SRE teams, serving as an advocate for secure development practices and shaping how secure software is engineered at Justworks.
QUALIFICATIONS:
- 5+ years of professional experience in software engineering, infrastructure, or security engineering
- 3+ years focused on application security, security automation, or DevSecOps practice
- Hands-on experience integrating security tooling into CI/CD pipelines (GitHub Actions strongly preferred): SAST, SCA, secrets detection, container scanning
- Proficiency with AWS and its security services (IAM, GuardDuty, Security Hub, CloudTrail); ability to design least-privilege access
- Experience with Kubernetes and infrastructure-as-code (Terraform preferred), including policy-as-code enforcement
- Proficiency in at least one programming language (Go, Python, or Ruby preferred); ability to build tooling, not just configure it
- Demonstrated ability to reduce security friction for engineers, with examples of controls teams adopted willingly
- Strong written communication skills; documentation as you build
