Senior Engineer, DevSecOps

About the role

Join Notability and shape the future of learning. We’re building the next generation of tools designed not just to capture notes, but to fundamentally improve how people learn, think, and collaborate. Our app brings the natural expressiveness of paper into the digital age, empowering millions of students, educators, and professionals worldwide to organize their ideas, deepen their understanding, and achieve their goals. Our mission is simple: we help you learn.

As part of our team, you’ll help create experiences driven by empathy, exceptional design, and the belief that great ideas can come from anywhere—including you. Come help us make learning better for everyone.

We're looking for a Sr DevSecOps Engineer with strong network security expertise to help build, secure, and maintain our cloud infrastructure. You'll build infrastructure automation, CI/CD pipelines, and defensive security measures to ensure our systems are reliable, scalable, and secure.

What You'll Do

- Design, implement, and maintain cloud infrastructure (GCP)

- Build and optimize CI/CD pipelines for automated testing and deployment

- Implement network security controls, including firewalls, VPNs, and segmentation

- Monitor systems for security threats and respond to incidents

- Manage container orchestration (Kubernetes, Docker)

- Automate infrastructure provisioning using Terraform

- Conduct security audits and implement remediation measures

- Implement observability solutions (logging, metrics, tracing, alerting)

- Collaborate with development teams on secure architecture decisions

- Optimize cloud costs and resource utilization

- Maintain disaster recovery and backup strategies

What You Need

- 5+ years of experience in DevSecOps, SRE, or infrastructure engineering

- Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs)

- Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR)

- Extensive knowledge of secure best practices for Cloud based Infrastructure

- Proficiency in scripting (Python, Bash, Go)

- You speak and write in Infrastructure as code, with an enthusiasm for automation, and a passion for scalable and reproducible security practices

- You possess broad security knowledge to connect the dots across domains and identify holistic ways to decrease the overall threat surface

- Have a strong grasp of offensive security to anticipate risks from an adversary's perspective, not just check compliance boxes

- Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, or PCI-DSS)

- Proficiency with monitoring and observability tools (Prometheus, Grafana, PagerDuty)

- Knowledge of secrets management and identity/access management

- Excellent communication skills