For Employers

360Learning

Senior DevSecOps Engineer

Posted 22 days ago
5-10 years experience
Apply Now

Please mention DailyRemote when applying

?Not checked yet0100
Resume Match Score

See how much of this job your resume covers, and what’s missing.

Want a recruiter to go through it line by line?

Get professional review

Tailor your resume to this job

One click makes a copy of your resume for this role, scores it against the posting, and proposes edits line by line. Your default resume is never changed.

  • Job match score for this posting
  • Edits you accept or skip, no invented facts
  • Download it when it reads right: TXT free, PDF with Premium

Create a cover letter for this job

Upload your resume and we draft a letter for this exact role, tailored to what it asks for.

  • Tailored to this role
  • Based on your resume
  • Fully editable
AI Summary

You will bridge the gap between security and platform engineering to harden infrastructure and automate security guardrails. Your role involves managing infrastructure-related alerts, vulnerability remediation, and ensuring compliance with ISO 27001 and SOC 2 standards.

Our Security and IT team keeps the 360Learning platform secure, compliant and auditable for the 1,500 organisations that learn on it every day. As a Senior DevSecOps Engineer, your mission is to make our infrastructure secure by design, detectable by default, and provable at audit time.

360Learning runs its learning platform on Azure and Kubernetes, certified ISO 27001:2022 and SOC 2 Type II. Over the past two years the technical security workload has grown on every front: a larger and more regulated customer base sending their own scans and security assessments, a wider detection and response scope, more infrastructure to keep hardened and auditable, and a growing backlog of security engineering projects that never reach the top of the queue.

We are creating this position to add real technical capacity on the infrastructure side of security, and to move part of our security posture from manual effort to automated guardrails. You will be the bridge between security and platform engineering: deep enough in infrastructure to fix things yourself, and close enough to security operations to know what to look for.

β€œOurs is a small, senior team with a broad scope: information security, compliance, infrastructure governance and internal tooling, with dual audit accountability on ISO 27001:2022 and SOC 2 Type II. That means direct impact and no layers between you and the decision. Roughly half of this role is greenfield build work you will own end to end.” Guillaume Seigneuret, CISO and Hiring Coach.

\n


Within 1 month, you will:
  • Complete our onboarding and learn how we work through our own platform and our Convexity culture

  • Map our Azure and AKS environment, our detection and logging coverage, and our ISO 27001 and SOC 2 control scope with the CISO and the Security Engineer

  • Meet the DevOps, platform engineering and IT teams you will work with daily

  • Shadow alert triage and one customer security assessment end to end


Within 3 months, you will:
  • Be autonomous on our AKS and Azure environment and handle infrastructure related alerts end to end

  • Have shipped at least one concrete hardening or automation improvement in production

  • Own the infrastructure scope of vulnerability management, from triage to remediation follow up


Within 6 months, you will:
  • Have the honeypot live and producing high fidelity alerts

  • Have measurably widened SIEM connector coverage, with documented log sources and retention

  • Run infrastructure vulnerability remediation on a predictable cycle with SLA reporting


Within 12 months, you will:
  • Manage detection content as code, with reviewed and tested rules and documented runbooks

  • Have largely automated audit evidence on the infrastructure scope

  • Have eliminated long lived credentials on the critical paths, so engineering teams ship on secure defaults they did not have to think about


The Skill Set:
  • 5+ years in infrastructure, cloud or platform engineering with a strong security focus, or in security engineering with hands on infrastructure practice

  • Production experience with Kubernetes: RBAC, network policies, admission controllers, secrets handling, workload identity, runtime security

  • Solid cloud experience, ideally Azure. Strong AWS or Google Cloud experience with a genuine interest in converting works too

  • Infrastructure as code: Terraform, GitOps workflows, CI/CD pipelines

  • Scripting and automation: Python or Go, plus shell. Comfortable reading and writing code, and opening pull requests on repositories owned by other teams

  • Log analysis and investigation: cloud audit logs, query languages, correlation across identity, network and application sources

  • Fluent English (US/UK) / B2 level or equivalent (FR). 

  • Enthusiasm for our working environment explained here: https://bit.ly/Convexity360L


What we offer:
  • Compensation: Package includes base salary, a variable component and equity πŸ“ˆ

  • Benefits/Perks: Work From Home stipend, RTT, lunch vouchers, medical insurance, gym subscription, 1 month parental leave for the second parent. 

  • Balance: Flexible hours, full remote work possible anywhere in France 🏠

  • Diversity, Equity, and Inclusion: We have 6 active ERGs including Mental Health, Environmental/Sustainability, Women, Parents, LGBTQIA2S+, and Ethnic Diversity. Each group has at least one executive team member serving as a member of the group, bringing greater awareness to each group’s activities and providing a quick path to impact 🀝

  • Corporate Social Responsibility: Review our CSR Charter: 360learning.com/blog/corporate-social-responsibility-charter 🌎🌏🌍

  • Culture: A framework that will help you make an impact - envision our way of working and our Convexity Culture: https://bit.ly/Convexity360L & find out more about the teams, product and processes https://bit.ly/42H1ggC πŸš€πŸ‘©πŸ»β€πŸ’»πŸ†


Interview Process:
  • Phone Screen with our Talent Acquisition Manager
  • Discovery Meeting with our Head of Security
  • Live exercise with our Head of Security and our Head of Devops: investigation of an incident scenario, or review of an insecure infrastructure configuration
  • Clarification Meeting with the Security Engineer and a DevOps engineer
  • Culture Fit Meeting with our VP of Engineering
  • Offer!


\n

Who We Are

360Learning enables companies to upskill from within by turning their experts into champions for employee, customer, and partner growth. With our LMS for collaborative learning, Learning & Development teams can accelerate upskilling with the help of internal experts instead of slow top-down training. 360Learning is the easiest way to onboard and upskill employees, train customer-facing teams, and enable customers and partners–all from one place.


360Learning powers the future of work at 1,700 organizations. Founded in 2013, 360Learning has raised $240 million with 400+ team members across North America and EMEA.


Learning Includes Everyone.

In concert with our culture, 360Learning believes learning includes everyone and that means embracing the strengths of diversity, connectedness, and inclusion. Through conscientious efforts, our global footprint celebrates cultures, perspectives, and experiences from all over the world to support our platform that is built for all regardless of race, ethnicity, gender identity or expression, sexual orientation, religion, age, neurodiversity, disability status, citizenship, veteran status or any other aspect which makes an individual unique or protected by laws and regulations in the locations where we operate. Thus, 360Learning is proud to be an equal opportunity workplace, and we commit to continue this throughout our processes for recruitment, compensation, benefits, performance, promotion, and all other conditions and terms of employment. We want to learn from and with you!

Automatically Apply to the Best Remote Jobs

Stop the endless job search. Our AI finds and applies to the best jobs for you.

Try it Now
Keep looking

Similar Jobs

See all Remote Software Development jobs →

IT Security Engineer

Full Time United States Software Development

IT Support Level 3

Full Time Mexico Software Development

Senior Solutions Engineer

Full Time United States Software Development

Senior Implementation Engineer

Full Time United States Software Development

Engineer Surveyor - Pressure Systems - Banbury

Full Time United Kingdom Β£45539 per year Software Development

OT Security Engineer (all genders)

Full Time Oman, Romania Software Development
Apply Now

Personalize your Remote Job Search in 3 Easy Steps!

Featuring 221,664+ Jobs in Software Development

Answer easy questions

Answer easy questions

221,664+ jobs across 15+ categories

Get your best job matches

Get your best job matches

Only hand-screened, legit jobs

Find a remote job faster

Find a remote job faster

No ads, scams, or junk

“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”

Sarah J. — Sarah J. · Marketing Manager ★★★★★ Verified