Site Reliability Engineer - Application Security

About the role

Join us as we push engineering forward in a world that’s changing fast. You’ll help us evolve how we build, deploy, and secure software. Embracing new technologies, challenging the status quo, and finding better ways to ship faster without compromising reliability or security. Working closely with our SRE and development teams, you’ll help run and improve our production infrastructure, streamline deployments, investigate production issues, and address security risks. You’ll also help build the technical controls that support SOC 2 audits and GDPR compliance. We’re excited to work with someone who’s curious about what’s next, passionate about continuous improvement, and motivated to turn new ideas into real engineering progress.

Our north star: Become an AI-first engineering team. AI coding agents are a core part of how we build and operate. We use them to write and review Terraform, debug incidents, automate repetitive operational work, and move faster without lowering the bar on quality or security. We’re looking for someone who already works this way, or is excited to: someone who knows how to direct an agent well, check its output with a critical eye, and spot where AI can remove toil from our infrastructure and security workflows. You’ll also help shape how we use AI safely, including guardrails, access controls, and keeping sensitive data protected.

Our environment includes AWS, Kubernetes on EKS, Terraform, Terragrunt, GitHub Actions, Prometheus, Grafana, and CloudWatch. Our applications use Ruby on Rails, Vue.js, and Node.js, with MySQL, PostgreSQL, and Sidekiq supporting the backend.

Your impact

- Infrastructure & reliability: Maintain AWS and Kubernetes environments, troubleshoot production issues, and improve availability, performance, and resource usage.

- Terraform & Terragrunt: Build and maintain infrastructure as code, review plans, manage environment configuration, and address infrastructure drift.

- Deployments & developer experience: Improve CI/CD pipelines, deployment automation, release checks, and rollback procedures.

- Monitoring & incidents: Improve monitoring and alerts, join the on-call rotation, and contribute to incident reviews.

- Application security: Work with developers to assess vulnerabilities, review security risks, and validate fixes.

- CI/CD security: Maintain code, dependency, secrets, container, and infrastructure scanning.

- Cloud security: Strengthen IAM, secrets management, network controls, and Kubernetes security.

- SOC 2 & GDPR: Support technical controls, audit evidence, and personal data protection.

- Recovery: Test backups and recovery procedures, maintain runbooks, and support production readiness.

- Collaboration: Participate in code reviews, document changes, and support application, AI, and data engineering teams.

About you

- Around 5+ years of experience in SRE, DevOps, platform engineering, cloud operations, or a related engineering role. Equivalent practical experience is welcome.