DevSecOps Engineer - Casa

About the Company

Casa is the secure home for your bitcoin. We're the leading provider of Bitcoin self-custody solutions, the ultimate blend of security, privacy, and control. Our team combines deep security expertise, human-focused design, and exceptional customer service to empower our clients and build lifelong relationships.

About the Role

Casa is looking for a DevSecOps Engineer to help secure our customers, their data, and our company. As a member of our Security team, you will report to our Chief Security Officer and play a crucial role in overseeing our security architecture and culture. This is a unique opportunity to help develop an evolving security program consisting of efficient processes, training materials, and methodologies for all employees.

Responsibilities

• Handle internal security requests and ensure employees have the tools and access they need without over-provisioning
• Ensure that employees have access to the tools and systems they need while maintaining least privilege access principles
• Onboard and offboard employees across internal systems
• Oversee MDM system and stay on top of alerts
• Review and assess new technologies (tools, code frameworks, third-party providers, internal apps) through a security lens
• Help shape and refine security best practices across the organization
• Triage and work through vulnerabilities surfaced by pen testing, static analysis, responsible disclosures, and automated alerts
• Keep security documentation and training materials fresh and useful
• Automate security processes and alerts wherever leverage can be found
• Participate in a shared on-call rotation for critical production security issues
• Stay abreast of the latest security events and trends
• Participate in regular security training and certification acquisition
• Ensure our software development lifecycle remains secure as processes continue to evolve
• Write infrastructure-as-code to automate deployment and management using Terraform, Ansible, or similar tools
• Stay current on emerging threats, security trends, and what's happening across our stack and industry
• Investigate and resolve infrastructure incidents to keep things running smoothly

Requirements

• Security certifications or equivalent real-world experience
• Think like an attacker; hacker mindset is genuinely how you approach problems
• Deep background across multiple facets of security
• 5+ years implementing security in Linux-based infrastructures, AWS, and code
• Comfortable with open-source tooling, cloud environments, and multiple operating systems
• Experience building security solutions that actually scale
• Hands-on with one or more of: penetration testing, threat modeling, code analysis, system hardening, distributed patching, vulnerability scanning
• Familiar with hardening AI tooling to prevent security incidents
• Strong communicator who can present findings to both technical and non-technical audiences
• Bonus: experience or genuine interest in cryptocurrency / cryptography

Compensation

$125,000-155,000 USD per year

Benefits

• Equity opportunities so employees can benefit from what we are building together
• Flexible time off; we encourage at least 3 weeks off a year
• Medical coverage with FSA options, dental, vision, and access to mental health providers
• Home office reimbursement up to $400
• Partnership with resources to invest a portion of your paycheck in Bitcoin, plus traditional 401(k) option
• 12 weeks maternity leave / 4 weeks paternity leave

As Casa is a fully remote company hiring candidates around the world, perks and benefit packages may adjust based on your location.

Location

Remote (NA)