DevSecOps Engineer

MetalBear is a global fully remote team building open-source developer tools for cloud engineers. Our flagship product, mirrord, allows developers to run local processes as if they were inside their cloud environment—without the hassle of deployment or disrupting shared environments.

Our product mirrord is used by engineering teams worldwide at companies of all sizes, from early-stage startups to Fortune 500 organizations.

We’re now looking for a DevSecOps Engineer to take ownership of our infrastructure, security, and compliance foundations as we scale. This is a rare opportunity to join early and define the security and DevSecOps posture of a fast-growing, open-source, developer-first company.

🛠 What You’ll Do

• Maintain and improve our IaC setup, ensuring reliability, scalability, and security.
• Oversee security architecture, implementing best practices for cloud security and compliance.
• Lead certification efforts, including ISO 27001, SOC 2, and other relevant frameworks.
• Continuously assess and enhance security posture across infrastructure and applications.
• Design, implement, and maintain CI/CD pipelines to streamline deployment and development workflows.
  
  

• Experience with Infrastructure as Code (Terraform, Pulumi, or similar tools).
• Strong knowledge of cloud platforms (AWS, GCP, Azure) and cloud security best practices.
• Experience with security frameworks and certifications (ISO 27001, SOC 2, NIST, etc.).
• Hands-on experience managing CI/CD pipelines (GitHub Actions, GitLab CI, ArgoCD, etc.).
• Knowledge of containerization and orchestration (Docker, Kubernetes).
• Proficiency in scripting languages (Python, Bash, or similar).
• Understanding of security concepts, threat modeling, and vulnerability assessments.
• Strong problem-solving skills and ability to work independently.
  
  

• Experience with DevSecOps practices and tools.
• Familiarity with compliance automation tools.
• Background in software development or system administration.
  
  

• Work on hard, meaningful problems at the intersection of local development and cloud infrastructure.
• Be part of a small, high-caliber team where your work directly impacts thousands of developers and some of the world’s biggest companies.
• Remote-first and async-friendly — high trust, low meetings, and flexibility to do your best work.
• Competitive salary, meaningful stock options, and a culture that values focus and autonomy.
• Build tools developers love — OSS-first, fast-growing, and already revenue-generating.