What We're Looking For

TrackVia seeks an enthusiastic DevSec Engineer to expand our InfoSec team as we continue to automate and improve our security program.

Our DevSec Engineer combines proven integration and automation skills with a passion for security. This role will make significant contributions to our security automation strategy and footprint. You should have an attitude of “problems are opportunities” and “manual work is tech debt” and apply both principles in your daily work.

The position is highly collaborative and requires excellent communication, project management, and research skills. You will have continuing education and training opportunities in both security and compliance, as well as low-code application development training via TrackVia University.

The DevSec Engineer reports to the Security Engineering Lead, Information Security. The position is remote with occasional travel to corporate headquarters in Denver, Colorado.

Responsibilities

Security

• Independently manage and contribute to assigned security tools and services.
• Develop automated processes for cloud inventory and components of our SOAR strategy.
• Participate in security event investigation and incident response.
• Support security metrics through automated testing of controls.
• Contribute to information security planning and problem resolution.

Development

• Utilize statically typed languages and git trunk-based development building cloud-native solutions.
• Develop custom API integrations to reduce toil and automate security tasks.
• Conduct internal code and process reviews and foster standards and best practices when developing CI/CD pipelines.
• Understand client-server relationships and microservices.
• Improve and automate manual processes to enhance scalability.

Partnership

• Collaborate with Operations and IT teams to ensure cloud and corporate data security.
• Work with HR to foster a culture of security awareness.
• Partner with InfoSec to drive TrackVia's internal security culture.

Continuous Education

• Stay updated on emerging security threats, AWS services, and major security frameworks (CSA Controls Matrix, NIST CSF).
• Maintain knowledge of industry best practices and standards and cross-pollinate across the organization.

Requirements

• Bachelor’s degree in Computer Science or related field.
• Passion for process improvement, efficiency, and automation.
• 2 years of professional development and automation experience.
• Proven integration and automation skills via REST APIs and microservices.
• Familiarity with Kubernetes, containerization, version control systems, and Linux.
• Experience with SIEM, IDS/IPS, vulnerability scanning solutions, and security exploits (OWASP Top 10, MITRE ATT&CK)
• Excellent critical thinking, problem-solving, planning, and time management skills.
• Proficiency in Agile and Kanban frameworks.

Nice to Have

• Experience with security orchestration and automated response platforms.
• Experience with GitLab and building CI/CD pipelines.
• Knowledge of security compliance audits (SOC2, HIPAA, etc.),
• Familiarity with Docker, Kubernetes, and DevOps best practices.
• Experience with no-code/low-code solutions, either as an end-user or a contributing employee.

Benefits:

• Fully Remote with optional quarterly meetups in Denver, Colorado
• Salary Range: $115,000 - $125,000
• 100% medical, dental, and vision benefits, 401k w/ matching contributions
• Unlimited, flexible time-off policy
• Competitive paid parental leave for all new parents after 6 months
• Excellent work/life balance including a 4-day work week all summer long

Work location is flexible if approved by TrackVia and located within the United States.