Staff Security Engineer, DevSecOps
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Staff Security Engineer leading DevSecOps within Corporate Security team at 1Password. Responsible for securing developer environments and overseeing GitHub security.
Responsibilities:
- You'll have real ownership and latitude to shape how developer security works at 1Password.
- Setting the technical vision, driving the standards and controls that engineering teams rely on, and building a well-run program that scales with the organization.
- This role works in close partnership with Infrastructure Security.
- Own the DevSecOps function: You'll have the latitude and mandate to build a well-run, properly owned developer security program at 1Password.
- Lead the program to harden 1Password's GitHub Enterprise environment and CI/CD pipelines.
- Define AI-assisted development security: As 1Password's engineering teams adopt AI coding tools and agentic workflows, you'll own the security model for how that happens.
- Drive and work with partner teams on improvements to dependency hygiene, secret management practices, token governance, and secure package consumption across the engineering organization.
- Build secure templates, baseline configurations, and developer-friendly guardrails that engineering teams adopt.
Requirements:
- Minimum of 8 years of combined experience in security engineering, DevSecOps, platform security, or closely related engineering roles, with deep focus on securing developer environments, CI/CD, or software supply chains.
- Deep, hands-on expertise in GitHub Enterprise security and governance, including branch protections, secret scanning, access controls, repository standards, Actions security, and audit logging at scale.
- Proven ability to design and implement security controls that integrate into CI/CD pipelines without meaningfully degrading developer velocity.
- Solid understanding of software supply chain security within developer environments, including dependency hygiene (npm, pip, and similar), token and secret management, secure package consumption practices, and SBOM generation.
- Practical experience solving security challenges introduced by AI-assisted and agentic development.
- Comfortable making architectural decisions that span multiple teams.
- Strong scripting and automation skills in Python, Bash, Terraform, or similar.
- Ability to build alignment with Platform Engineering and other engineering stakeholders.
- A track record of elevating the people around you through mentorship, documentation, and deliberately creating growth opportunities for other engineers.
- Experience participating in on-call rotations and contributing to investigations involving developer tooling, source control, or credential exposure.
Benefits:
- immediate participation in 1Password's benefits program (health, dental, 401k and many others)
- utilization of our generous paid time off
- an equity grant
- participation in our incentive programs
Similar Jobs
DevOps / Platform Engineer
DevOps engineer at Return building infrastructure for carbon-free energy systems. Focused on cloud environments and self-hosted infrastructure, impacting renewable energy transition.
Senior DevOps Engineer
Lead Senior DevOps Engineer designing and implementing the entire DevOps platform. Collaborating with cross-functional teams to ensure operational reliability for AI-driven mobile applications.
Senior DevOps Engineer – Kubernetes
Senior DevOps Engineer working with cloud technologies for secure solutions at FICO. Collaborating with teams to drive high-volume decisioning and analytics execution.
DevOps Engineer
DevOps Engineer developing services and products at Skydropx within a dynamic and multicultural environment. Collaborating with a team to innovate logistics and resolve technical challenges.
Senior DevOps Engineer, Team Lead
Senior DevOps Engineer managing infrastructure and deployment processes for healthcare tech company Prompt Therapy. Leading a team and ensuring scalability, security, and reliability in cloud environments.
DevOps Engineer
DevOps Engineer at Knotch focusing on building and scaling infrastructure for AI-driven marketing technology. Collaborate across teams to enhance reliability and performance.
Senior Platform Engineer – DevOps
Senior DevOps Engineer developing solutions for high impact in distributed and critical environments. Leading the evolution of observability stacks and CI/CD pipelines with AWS environments.
Senior DevOps Engineer
Senior DevOps Engineer at Akido managing AWS cloud infrastructure and Kubernetes clusters. Leading CI/CD improvements and collaborating with software engineers.
DevOps Engineer
DevOps Engineers managing cloud infrastructure and AI workflows for global organizations. Collaborating with diverse teams to deliver high-impact technology solutions.
DevOps Engineer, Azure Platform
DevOps Engineer Pleno focused on automating and building in Azure environments. Supporting development teams with continuous delivery and high-quality cloud solutions.
DevOps Engineer
DevOps Engineer responsible for designing, implementing, and maintaining CI/CD pipelines and managing infrastructure. Collaborating across teams and automating processes using AWS and other tools.
Senior Backend / DevOps Engineer
Senior Backend / DevOps Engineer at Abstra developing RESTful APIs and managing AWS infrastructure. Collaborating in a remote team to enhance cloud capabilities and coding standards.
Especialista em Arquitetura – DevOps, IaC, Ansible, Terraform
Especialista em Arquitetura / DevOps desenvolvendo infraestrutura como código utilizando Ansible e Terraform. Liderando a definição de arquitetura e práticas de DevOps em ambientes multiambiente.
Entry Level Software Engineer – Site Reliability
Entry-level Site Reliability Engineer at Yelp ensuring platform reliability and scalability while collaborating with a globally distributed team. Building tools and troubleshooting site issues using industry-leading tools.
DevOps Manager
DevOps Manager overseeing AWS infrastructure for federal grants management platform. Ensuring reliability and security of the Grants.gov IT Services Contract with a focus on system availability.
Software Engineer – DevOps
Software Engineer (DevOps) building and managing AWS cloud infrastructure for Impiricus. Contributing to application quality through automation, defect resolution, and feature development.
Senior Site Reliability Engineer
Senior Site Reliability Engineer managing infrastructure for Payward Services at Kraken. Ensure performant, resilient, and continuously improving services with global teams.
Senior Site Reliability Engineer
Senior Site Reliability Engineer at Kraken managing infrastructure for Payward Services. Collaborating with development teams and improving operational excellence in a fully remote setup.
DevOps Engineer
DevOps Engineer developing internal tools and CI/CD pipelines at Social Discovery Group, focusing on deployment automation and Kubernetes environments.
Analista SRE, Junior
Junior SRE Analyst managing Linux servers with a focus on security at SysMap Group. Collaborating in cloud resources, monitoring, and DevOps practices.