Senior DevSecOps (Full Time, Canada) at Quantstamp

As a Senior DevSecOps Engineer you will bridge our infrastructure and security teams, taking ownership of security-focused initiatives and helping us provide around-the-clock support as part of our on-call rotation.

Candidate Profile

Background in Computer Science or related field
5 years of professional experience as a DevSecOps engineer
Proven experience in securing AWS-based setups and Kubernetes clusters
Proven experience with CI/CD pipelines, automation, and TerraForm
Strong understanding of how PKI works, as well as SSL and TLS protocols
Hands-on experience with security tools (e.g., OWASP ZAP, Nessus, Qualys)
Familiarity with SIEM and other security platforms
Knowledge of relevant regulatory standards (e.g., GDPR, SOC 2, ISO/IEC 27001)

Nice to Have

Security certifications such as CISSP, CCSP, GCSA, CDP, OSCP, CEH, or GIAC
Cloud security certifications like AWS Certified Security Specialty

Responsibilities

Implement and manage security tools within our CI/CD pipelines, including DAST, SAST, and container scanning solutions.
Secure our cloud environments with a focus on IAM, secrets management, and workload protection
Provide expert opinions to inform decisions and assist in evaluating, selecting, and implementing security tools and frameworks (SIEM, CNAPP, SSPM, SOAR, XDR).
Participate in the existing on-call rotation to maintain 24/7 coverage
Work closely with team members across APAC, Europe, and North America to ensure seamless integration of security practices
Detect, mitigate, and respond to security incidents, utilizing log analysis tools and contributing to incident post-mortems
Ensure our systems comply with relevant regulatory standards

Compensation & Perks

Competitive compensation package (commensurate to experience) + performance and referral bonuses
100% remote and flexible working hours
Work from anywhere in the world
Generous paid time off, including maternity/paternity leave
Retirement/pension plan
Equity
Rent your own desk in a co-working space or work from anywhere at any time
Free gym membership or any virtual alternative of your choice
Learn about the hottest and newest products and trends in the crypto space before they appear on any news outlets
Join quarterly all-expenses-paid retreats in exotic/exclusive locations with the team

Life at Quantstamp

Quantstamp is a smart contract security company that is developing the Quantstamp protocol and automated security tools, and conducts manual audits. The Quantstamp protocol aims to enhance smart contract security and the reputation of projects that create smart contracts by producing openly accessible scan reports.

Thrive Here & What We Value

1. Competitive compensation package (commensurate to experience) + performance and referral bonuses.

1. Remote and flexible working hours; work from anywhere in the world.

1. Generous paid time off, including maternity/paternity leave.

1. Retirement/pension plan.

1. Option for Equity.

1. Rent your own desk or work remotely at any time.

1. Free gym membership or virtual alternatives.

1. Quarterly all-expenses-paid retreats in exotic locations with team.

1. All-inclusive benefits for employees.

Job FunctionsImplementing and managing security tools within CI/CD pipelinesSecuring cloud environments with a focus on IAM, secrets management, and workload protectionProviding expert opinions to inform decisions and assist in evaluating, selecting, and implementing security tools and frameworks

Job Requirements5 years of professional experience as a DevSecOps engineerProven experience in securing AWS-based setups and Kubernetes clustersHands-on experience with security tools (e.g., OWASP ZAP, Nessus, Qualys)Familiarity with SIEM and other security platformsKnowledge of relevant regulatory standards (e.g., GDPR, SOC 2, ISO/IEC 27001)

SkillsProven experience in securing AWS-based setups and Kubernetes clustersHands-on experience with security tools (e.g., OWASP ZAP, Nessus, Qualys)Familiarity with SIEM and other security platformsKnowledge of relevant regulatory standards (e.g., GDPR, SOC 2, ISO/IEC 27001)Strong understanding of how PKI works, as well as SSL and TLS protocolsProven experience in securing AWS-based setups and Kubernetes clustersHands-on experience with security tools (e.g., OWASP ZAP, Nessus, Qualys)Familiarity with SIEM and other security platforms

Senior DevSecOps (Full Time, Canada)

Candidate Profile

Nice to Have

Responsibilities

Compensation & Perks

Life at Quantstamp

Your tracker settings