Greenhouse ·
full-timeSenior Devsecops Engineer
Justworks · New York, New York
Who We Are At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people. We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you. We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team. Our Values If this sounds like you, you’ll fit right in. Department Engineering > Platform Who You Are You believe the secure path should be the easy path. You've spent your career where security and engineering meet, and you've learned that scanners nobody reads and gates nobody can pass don't make software safer, they make engineers route around you. So you build guardrails instead: pipelines that catch vulnerabilities before a human ever has to, golden paths with security baked in, and automation that turns "did we patch that?" from a meeting into a dashboard. You're comfortable in a CI/CD pipeline, an AWS account, and a Kubernetes cluster. You can read application code well enough to tell a real injection risk from scanner noise, and you'd rather fix the template that generated the bug than file 40 tickets about it. This is a foundational role. You'll be one of the first dedicated DevSecOps engineers on a platform organization supporting 300+ engineers, working alongside our Developer Experience and SRE teams and partnering closely with the Security organization. You'll shape how secure software gets built here, not just review it after the fact – including how we use AI to find and fix vulnerabilities before they reach production. Security is primarily responsible for discovering, prioritizing, and reporting on risk posture; Engineering is primarily responsible for remediation. This role lives at that seam — partnering with Digital Security on coverage, and driving the fixes through Engineering. This role reports to Platform Engineering but has a dotted line reporting to Digital Security leadership. Your Success Profile What You Will Work On Own security automation across our CI/CD pipelines (GitHub Actions): SAST, SCA, secrets detection, and container scanning that runs fast and flags things worth fixing. Build security into our golden path templates for Go, Rails, and Vue.js services, so new services start secure by default. Harden our software supply chain: dependency management, artifact signing, SBOM generation, and provenance for what we ship. Implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement, catching misconfigurations before they reach an environment. Coordinate vulnerability exposure remediation across all of Engineering, including code vulnerabilities, infrastructure configuration changes, and patching. Build vulnerability management automation that routes findings to owning teams with context, deduplicates noise, and tracks remediation without spreadsheets. Own implementation of secrets management patterns and tooling, and drive the elimination of long-lived credentials in favor of short-lived, federated identity. Partner with the Security team on cloud security posture across our AWS environments, and make sure Platform's telemetry gives Detection & Response what they need. Support Security's rollout of agentic penetration testing, and build the auto-remediation that turns vulnerability findings into fixes before they can be exploited. Explore and roll out AI-assisted security review of code changes, with guardrails that keep signal high and false positives low. Drive adoption through documentation and developer education, because a control nobody understands is a control nobody follows. Measure what matters: time-to-remediate, scan coverage, secrets findings, and mean time to patch, so we can see whether we're actually getting safer. Serve as an advocate for secure development practices, defining how secure software is engineered. How You Will Do Your Work As a Senior DevSecOps Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following competencies: Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome. Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by ass
| Role | Senior Devsecops Engineer |
|---|---|
| Company | Justworks |
| Location | New York, New York |
| Type | full-time |
| Compensation | Not disclosed |
| Posted | 2026-10-05 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4Senior Devsecops Engineer at Justworks: frequently asked questions
- What is the salary for this role?
- Justworks has not stated compensation in the listing. Check the original posting or ask during the application process.
- Is the Senior Devsecops Engineer position remote, hybrid or onsite?
- The listing gives New York, New York as the location and does not state a work mode.
- What is the application deadline?
- Justworks has not listed a fixed deadline, so apply early in case the opening is filled.
- How do I apply for the Senior Devsecops Engineer role?
- Use the Apply button on this page. It opens the original listing on boards.greenhouse.io, where you submit your application with the company.
More at Justworks
Other jobs at Justworks
- Senior Customer Success Manager, International · New York, New York
- Senior Software Engineer, Frontend · New York, New York
- Tax Associate, Client Tax Services And Solutions · New York, New York
- General Manager & Director, Product · New York, New York
- General Manager & Director, Commercial Strategy · New York, New York
Explore Related Placements
// similar opportunities
You might also like
Senior Devops Engineer
Lodgiq
Senior Devops Engineer at LodgIQ 1 video 1 recruiter Agency job via Hashone Careers by Fredina Graceline...
Senior Devops Engineer
Tokyodev
Senior DevOps Engineer...
0-1 year experience eligible.
Senior Software Engineer, Frontend
Justworks
Who We Are At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to inter...
Senior Security Engineer
Mixpanel
About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the ...
Senior Data Engineer-1
Mastercard
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sust...
Senior Software Engineer, Devops - Moveworks (devsecops)
Servicenow
No description available.