Senior DevSecOps Engineer

Netlify’s SRE team is on a mission to scale Netlify’s infrastructure to support our next million users. We focus on ensuring application resiliency and delivering a robust compute and network platform at scale. As a Site Reliability Engineer within the Infrastructure SRE team, you’ll collaborate closely with the Security team, acting as a bridge between teams to build secure and reliable systems. With our team, you’ll play a key role in designing, developing, and delivering solutions that enhance the scalability, availability, and efficiency of our platform. Our tech stack includes Kubernetes, AWS, GCP, Kafka, CDNs, and Golang-based microservices, among other technologies. Whether you're an experienced systems engineer or a software developer eager to dive into systems, we’re excited to hear from you! We are a remote-first, globally distributed group, emphasizing asynchronous communication to prioritize execution over meetings. Documentation is at the core of how we operate, and we are deeply committed to our values of transparency, empowerment, and collective ownership. We foster a culture of curiosity, collaboration, and support, where there are no dumb questions. Everyone on our team knows their contributions matter, feels empowered in their role, and can quickly see the impact of their efforts. At Netlify, we believe diversity is key to innovation, and as a remote-first company, we value the unique perspectives that come from our team’s varied backgrounds. Whether you’re launching a new career or growing an established one, Netlify is a place where you can do impactful work while maintaining a healthy work-life balance. What You’ll Do: Operate and manage security tools (e.g., SIEM, IDS/IPS) to monitor the organization’s security posture and detect suspicious activities. Manage full infrastructure lifecycle from design to decommission, ensuring systems are secure and compliant. Participate in an on-call rotation for the compute platform and related systems. Actively monitor security systems for anomalies and respond to security incidents. Automate routine tasks and develop tools to improve system efficiency and reduce the human intervention time on any tasks. Conduct system performance tuning and troubleshooting, as well as capacity planning, to ensure system reliability and efficiency. Participate in the creation and testing of disaster recovery plans. Perform regular security assessments and audits, including penetration testing and vulnerability scans. Educate team members on security best practices and emerging threats. What You'll Bring: Several years of experience in SRE, devops, security or related roles. Previous experience in a mixed role involving security and system operations. Proven experience working in hyperscale cloud environments. Demonstrated ability to lead security and infrastructure projects. Proficient in managing and securing cloud-based environments. Strong understanding of network protocols, configurations, and encryption technologies. Experience with automation tools (e.g., Ansible, Terraform) and scripting languages (e.g., Python, Bash, Golang). Familiarity with compliance requirements and frameworks: PCI, ISO 2701, HIPAA, SOC 2. Experience automating component deployment across multiple environments using tools like Jenkins, CircleCI, or GitHub Actions. Proficient observability and log analysis techniques to detect and resolve security threats and system issues. Effective communication skills for both technical and non-technical stakeholders.

At Netlify, we’re on a mission to build a better web by making it easier than ever to build, deploy, and scale web applications. By unifying an entire ecosystem of web development tools, content sources, services, and APIs into one simplified workflow, Netlify empowers top brands to ship campaigns faster, reduce risk, and boost productivity and revenue. At the forefront of the composable web movement, with over 4 million web developers and businesses using the platform, with Netlify, you can connect everything and build anything. We are a Series D company that has raised over $200M from investors such as Andreessen Horowitz, Kleiner Perkins, EQT, Bessemer, BOND, and Menlo Ventures. As a fully distributed company, we aim to create a company culture where the best idea can come from anywhere and strive to be thoughtful, compassionate, and collaborative in our work.