Ava Labs is hiring a

Web3 DevSecOps Engineer

We're looking for a DevSecOps Engineer to work closely with our DevOps team to optimize the security of our cloud infrastructure, including Kubernetes, Docker, and Terraform. You should be fluent in modern DevOps tooling and also possess a keen security mindset, with a deep knowledge of Linux hardening and cloud deployment best practices. Knowledge of AWS and its security quirks is essential, bonus if you know Azure.

WHAT YOU WILL DO

• Make a full inventory of everywhere we use Kubernetes and cloud instances, report on the current state of affairs, lay out a roadmap for security optimization, and begin implementing those changes in a methodical and well-documented manner
• Discover new security vulnerabilities in the underlying k8s code
• Integrate security tools and associated processes into the DevOps
• Work across cross-functional engineering teams and utilize technical capabilities to support high performance and security across build projects and technical operations
• Serve as a subject matterexpert (SME) in DevSecOps and security for CI/CD best practices

WHAT YOU WILL BRING

• 3-5 years of DevOps + security experience
• Significant experience integrating security tools into a CI/CD pipeline
• Hands-on experience with IaaC, Docker, Kubernetes, Terraform, Hashicorp Vault, Github Actions or similar
• Experience of AppSec tooling: SAST (Snyk, Sonatype) / DAST (Burp Enterprise, OWASP Zap etc)
• Proven track record (or at least demonstrated understanding) of "shift left" approach to implementing security
• Experience in working on distributed and large complex systems
• Experience with Atlantis
• Programming or scripting experience (python/bash/AWS SDK) a big plus
• Bonus if you have Datadog experience and/or microkernals

#LI-Remote #LI-TW1