<div><strong>Who We Are</strong></div><div>Angel Studios is the home of stories that amplify light. Through its platform, thousands of “Angel” investors choose which titles will be created, funded, and distributed. Angel Studios allows creators and audiences to form passionate communities around their creative projects, making the story behind the story as important as the final project itself. Some of the studio's key projects-- The Sound of Freedom and Dry Bar Comedy --have earned billions of views around the world. Learn more at <a href="http://angel.com/">Angel.com</a></div><div><br></div><div>We’re looking for passionate team members who want to build world-class products that will reshape media over the coming decades. Learn more about:</div><div><a href="https://www.notion.so/Angel-s-North-Star-a9388445c842468c959c01b1db9b35d6">Our North Star</a></div><div><a href="https://www.notion.so/Company-Strategy-7e0737b7d62f49c8a05b65fdb1d6fdc3">Company Strategy</a></div><div><a href="https://www.notion.so/Team-Principles-a08af3598a6e47e4a9d01825e8ff3e98">Team Principles</a></div><div>Join us and be part of stories that amplify light.</div><div><br></div><div><strong>Summary/Objective:</strong></div><div>Angel Studios is seeking an experienced Sr. DevSecOps Engineer to deliver top-tier solutions with minimal guidance.&nbsp;</div><div><br></div><h3>Expectations at Angel Studios:</h3><ul><li>Amplify light in every action.</li><li>As the owner of your outcomes, you are empowered to break down silos and coordinate with any and all people you need in order to reach your goals.&nbsp;</li><li>You are ultimately responsible for achieving the outcomes while also using resources wisely - whether that be money, people, or time.</li><li>Know your customer - it might be our viewers, investors, creators, or internal Angel Teams. Ensure you understand your customer and provide what THEY need, not just what you want to build.&nbsp;</li><li>You OWN the success of your team members, including hiring, onboarding, goals, performance management, raises, terminations, etc.</li><li>Hold team members accountable to their goals - help them grow and make the most of the resources they bring. Document their performance for reviews.&nbsp;</li><li>Create opportunities for team members to take the initiative and ownership.&nbsp;</li><li>Give consistent and timely candid feedback with compassion - your team members need to know where they stand at all times. If you find yourself doubting a team member, address it swiftly with actionable feedback.</li><li>Contributes in a way that moves the Angel mission forward and exemplifies the team qualities required for working at Angel.</li><li>When faced with roadblocks, mistakes, or unforeseen circumstances, consistently and proactively find creative solutions and/or break down barriers to handle the challenge or complication. (Focus is on creating/building/testing/learning/resolution rather than getting stuck and identifying or placing blame).</li></ul><div><br></div><h3>Essential Functions:</h3><ul><li><strong>Integrate Security into CI/CD:</strong> Design, implement, and manage security tools and processes within the CI/CD pipeline (e.g., SAST, DAST, IAST, SCA, and container scanning).</li><li><strong>Automation:</strong> Develop and maintain automation scripts and tools to streamline security operations and incident response.</li><li><strong>Security Architecture:</strong> Collaborate with development and operations teams to design and implement secure infrastructure and application architectures in the cloud and in Kubernetes.</li><li><strong>Threat Modeling:</strong> Conduct threat modeling exercises for new and existing applications and systems.</li><li><strong>Security Monitoring &amp; Incident Response:</strong> Implement and manage security monitoring solutions. Participate in incident response activities, including investigation, remediation, and post-mortem analysis.</li><li><strong>Compliance and Governance:</strong> Ensure systems and processes adhere to relevant security standards, regulations (e.g., ISO 27001, SOC 2, GDPR, HIPAA), and internal policies.</li><li><strong>Security Champion &amp; Training:</strong> Promote security awareness and best practices across engineering teams. Provide training and guidance on secure coding practices and security tools.</li><li><strong>Cloud Security:</strong> Implement and manage security controls for cloud environments (e.g., AWS, GCP), including identity and access management (IAM), network security, and data protection.</li><li><strong>Documentation:</strong> Maintain comprehensive documentation for security processes, tools, and configurations.</li></ul><div><br></div><div><em>Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.</em></div><div><br></div><h3>Competencies:</h3><ul><li>An exceptional listener with excellent written and verbal communication skills.</li><li>Passionate about careful design &amp; architectural planning that leads to a codebase that is future-proof and maintainable.</li><li>Self-starter with the ability to seek out opportunities, create an action plan and see it through to fruition.</li><li>Exceptional team player with the ability to understand the perspective of multiple stakeholders in compromising solutions for marketing, product, and data growth and development.</li><li>Ability to take individual ownership, execute with high energy, share context, and insist on candor with positive intent.</li><li>Be adaptive to new initiatives and functions required in order to solve problems for scale as they arise</li><li>Enjoy the challenge and opportunity to lead and improve the development experience at Angel Studios by enhancing development tools, test coverage, and code structure.</li><li>Detail-oriented perspective and ability to pick up on overlooked details.</li><li>Familiarity with Cloud Based Platforms and services.</li><li>Able to maintain the confidentiality of information.</li><li>Must be able to manage multiple assignments, set priorities, and adapt to changing conditions.</li><li>Resourceful and able to problem-solve and manage tasks with ambiguity.&nbsp;</li><li>Willing to perform an array of tasks both in and out of the office.</li><li>Organization and time management.&nbsp;</li><li>Can take feedback on tasks and assignments positively and create better solutions.</li><li>A quick study, able to pick up new skills and learn how to use new programs.</li></ul><div><br></div><h3>Required education and experience</h3><ul><li>Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.</li><li>5+ years experience in a DevSecOps, DevOps, or Security Engineering Role.</li><li>2+ years experience in AWS in a security-adjacent role.</li><li>Hands-on experience with CI/CD tools (e.g. GitLab CI, GitHub Actions).</li><li>Strong understanding of DevOps principles and CI/CD methodologies.</li><li>Solid understanding of cloud security principles and experience in AWS.</li><li>Understanding of common web application vulnerabilities (OWASP Top 10) and mitigation techniques.</li><li>Knowledge of containerization technologies (e.g. Docker, Kubernetes) and their security implications.</li><li>Familiarity with Infrastructure as Code (IaC) tools (e.g. Terraform, CloudFormation, Helm, Kustomize).</li><li>Knowledge of network security concepts (firewalls, IDS/IPS, WAFs, VPNs).</li><li>Experience with scripting languages (e.g. Python, Bash).</li></ul><div><br></div><h3>Preferred education and experience</h3><ul><li>Relevant cloud and/or security certifications (e.g., Security+, CISSP, GSEC, CISM, AWS Solutions Architect, AWS Certified Security Specialty).</li><li>Experience with secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager).</li><li>Understanding of microservices architecture and serverless computing security.</li><li>Contributions to open-source security projects.</li><li>Background in incident response and/or penetration testing.</li></ul><div><br><strong>Salary:&nbsp;</strong>$121,000 - $160,000 a year</div><div><br></div><div>Commensurate with experience and scope of responsibility.</div><div><strong>Perks at Angel:</strong></div><div><br></div><div>- Competitive compensation</div><div>- 100% company-paid medical, dental, and vision premiums for employees <strong>and</strong> dependents</div><div>- Short, and Long Term Disability Insurance and Basic Life Insurance paid for employee, with option of additional AD&amp;D insurance</div><div>- Generous Paid Time Off</div><div>- Health Spending Account (HSA)</div><div>- 401(k) investment opportunity with employer match</div><div>- Paid parental leave</div><div>- Identity Theft Insurance</div><div>- Pet Insurance</div><div><br></div><div><br></div><div><strong>Other duties</strong></div><div><br></div><div>Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the team member for this job. Duties, responsibilities and activities may change at any time with or without notice.</div><div><br></div><div><br></div><div><br></div><div><strong>Angel is an Equal Opportunity Employer:</strong></div><div><br></div><div>At Angel Studios, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates.</div>

DevSecOps Engineer

<div><strong>Join Our Team as a Senior Data Security Engineer!</strong></div><div>&nbsp;</div><div>Are you ready to be the Ministry's go-to expert in data security? Reporting directly to the Data Compliance and Protection Manager, you'll step into the role of <strong>"Trusted Advisor"</strong>. Your expertise in data security architecture, design, engineering, and implementation will be pivotal in safeguarding our operations. You'll lead risk assessments, mitigate threats, and ensure compliance with regulatory standards.</div><div>&nbsp;</div><div>But that's not all! You'll also mentor and coach our OIS teammates, delivering top-notch customer service and driving security awareness across the ministry. If you're passionate about creating a secure environment and guiding others to do the same, we want you on our team!</div><div>&nbsp;</div><div><strong>Apply now and be the cornerstone of our security strategy!</strong></div><div><strong>&nbsp;</strong></div><div><strong>Here's some of what you will be doing:</strong></div><ul><li>Develop and design implementation of robust data security architecture across various platforms.</li><li>Develop and maintain encryption, tokenization, and key management strategies.</li><li>Evaluate and integrate advanced security technologies to protect sensitive data.</li><li>Directly implement security solutions to protect and safeguard data at rest, in transit, and during processing.</li><li>Collaborate with development teams to embed security controls with applications and systems.</li><li>Collaborate with teams on system and code reviews. Provide guidance on best practices.</li><li>Provide tactical and strategic direction for data protection and security projects.</li><li>Perform comprehensive data security risk assessments and develop mitigation plans.</li><li>Identify gaps and vulnerabilities within systems and work with cross-functional teams to address them.</li><li>Establish data security standards and procedures.</li><li>Ensure data protection measures comply with regulations such as but not limited to GDPR, CCPA, COPPA.</li><li>Participate in compliance related audits and provide reporting as needed to demonstrate adherence to data protection requirements.</li><li>Support incident response efforts and provide proactive and reactive mitigation guidance.</li><li>Work closely with IT, DevOps, and other teams to align on security objectives.</li><li>Stay abreast of emerging data protection trends and threats.</li><li>Mentor and coach ministry Team Members and Leaders.</li></ul><div><br><strong>Here's some experience we are seeking:&nbsp;</strong></div><ul><li>Bachelor’s degree in information security, information technology, computer science or related field, or combination of education/training with relevant experience.</li><li>Relevant certifications such as CIPT, CIPP, CISSP, GCCC.</li><li>Minimum of 5 years of experience in data protection engineering. 8 years preferred.</li><li>Extensive knowledge of data security principles, encryption technologies, and key management.</li><li>Experience with technologies such as DLP, IAM, vulnerability management, data management and classification technologies.</li><li>Experience with cloud data protection practices within AWS, Azure, Snowflake, Google Cloud.</li><li>Programming skills are desirable.</li><li>Excellent analytical and problem-solving skills.</li><li>Familiarity with Secure Software Development Lifecycle.</li><li>Experience with DevSecOps practices and tools.</li><li>Strong understanding of network security and architecture.</li><li>A collaborative and flexible style, with a strong service mentality. Ability to collaborate with cross-functional teams.</li><li>Excellent interpersonal skills with the ability to develop sincere business/ministry relationships.</li><li>Strong written and verbal communication and presentation skills.</li><li>Demonstrated commitment to the social sector with a passion for our mission and value</li></ul><div>&nbsp;</div><div><strong>What can we offer you?</strong></div><ul><li>Industry leading Medical, Dental &amp; Vision coverage</li><li>Short/long term disability and life insurance</li><li>Robust 401K with company match</li><li>Parental leave with Baby Bonding pay</li><li>Generous PTO, holiday and sick pay</li><li>Unique company culture that includes exclusive access to concerts, movie premieres, media industry events, and more</li><li>Leadership and Career Development Programs including free access to LinkedIn Learning platform</li></ul><div><br><strong>Why work for Educational Media Foundation, K-LOVE/Air1?</strong></div><div>Educational Media Foundation (EMF) is a nonprofit, multi-platform media company on a mission to draw people closer to Christ. Founded in 1982 in Santa Rosa, CA, with a single radio station, EMF today owns and operates the nation's two largest Christian music radio networks (K-LOVE and Air1) with over 1,000 broadcast signals across all 50 states and beyond, streaming audio reaching around the world, and a growing family of media ministries including podcasts, books, films, concerts, and events. EMF employs nearly 500 team members between its offices in Nashville, TN, Rocklin, CA, and field locations around the country. You can view our mission and values here <a href="https://www.klove.com/about-us/mission">Mission, Beliefs &amp; Values.&nbsp;</a></div><div>&nbsp;</div><div>&nbsp;</div><div>“As an Equal Opportunity Employer, EMF makes employment decisions based on merit and other legitimate reasons. The Company is committed to a diverse and inclusive work environment and the promotion of equal employment opportunities regardless of protected class, characteristic or status.&nbsp; However, EMF is also a religious non-profit organization where all team members contribute to the Company’s mission of encouraging our audiences “to have a meaningful relationship with Christ.” <em>Therefore,</em> p<em>ursuant to the Civil Rights Act of 1964, Section 702 (42 U.S.C. 2000e I(a)), EMF has the right to hire only candidates who agree with the Company’s Statement of Faith.&nbsp; Also, as a religious non-profit organization, the Company is not governed by the CA Fair Employment and Housing Act."</em></div>

Senior Data Security Engineer

<div><br></div><h3><strong>Product Security Operations Analyst</strong></h3><div><br></div><div><br></div><div><strong>About this Role</strong></div><div>As our <strong>Product Security Operations Analyst</strong>, you will strengthen the security of our product and engineering ecosystem. In this role, you will collaborate with engineering teams to develop and implement security best practices, policies, and procedures. You will drive security initiatives from concept to completion, ensuring a strong security posture across our products and processes.<br><br></div><div><br>Success in this role requires a deep understanding of modern cloud-based product ecosystems, strong communication skills, and the ability to work cross-functionally. Most importantly, you will bring your skills and experience to help further our mission of helping people experience the Bible as a unified story that leads to Jesus.&nbsp;<br><br></div><div><strong><br>Core Responsibilities<br></strong><br></div><div><strong>Leadership<br></strong><br></div><ul><li>Advocate security best practices through every step of the development lifecycle and engineering environment.</li><li>Guide the engineering team in evaluating risks as it relates to our data, infrastructure, and code.&nbsp;<br><br></li></ul><div><strong>Responsibility<br></strong><br></div><ul><li>Lead security initiatives from concept to completion in collaboration with cross-functional squads.</li><li>Assess and prioritize vulnerabilities, equipping developers with the guidance and resources to remediate effectively.</li><li>Develop and document security policies and procedures, with a focus on clarity and practical value.</li><li>Support all org-wide security initiatives.<br><br></li></ul><div><strong>Expertise<br></strong><br></div><ul><li>Vulnerability Management: Demonstrate knowledge of vulnerability prioritization and remediation strategies.</li><li>Incident Response: Investigate and resolve security incidents, in collaboration with engineering teams, focusing on minimizing impact and preventing future incidents.</li><li>Security Alerting: Design, implement, and configure security monitoring capabilities to generate meaningful security alerts</li><li>Cloud Configuration: Partner with DevOps to shape and secure our cloud and development environment.</li><li>Proactive Security Review: Drive alignment with engineering to evaluate new features and services during the planning phase, embedding security into design decisions.<br><br></li></ul><div><strong><br>What We Are Looking For<br></strong><br></div><ul><li>4+ years experience in a Cybersecurity role, with a focus on product security/application security/DevSecOps.</li><li>Broad experience using security/monitoring tools (e.g., Vulnerability, SAST/DAST, and Monitoring Tools)</li><li>Competence using, managing, and configuring cloud security features for AWS or GCP.</li><li>Knowledge of risk assessment methodologies, threat modeling practices, and industry standard frameworks (e.g., OWASP Top 10, NIST-CSF, etc.).</li><li>Ability to communicate complex information effectively and in an engaging manner, leading to action.</li><li>Ability to lead with empathy, guiding teams toward a stronger security posture by fostering collaboration, trust, and shared responsibility.</li><li>Nice to have:<ul><li>Experience leveraging APIs for automation (ideally with Python).</li><li>Experience leading product/application security training.<br><br></li></ul></li></ul><div><strong><br>About BibleProject</strong></div><div><strong><br>Portland, Oregon, Founded in 2014</strong></div><div><br>BibleProject is a nonprofit, crowdfunded organization that produces 100% free Bible videos, podcasts, blogs, classes, and educational resources. Our mission is to help people experience the Bible as a unified story that leads to Jesus.<br><br></div><div>We have grown significantly in the area of multimedia technology. What began with two animated videos now encompasses multiple platforms and products—including over 160 videos. Our website and app serve as connection hubs to our ever-growing library of resources. Classroom, our online learning platform, offers accessible, graduate-level Bible classes.</div><div><br>These, and all of our supporting products, continue to be completely free to audiences worldwide, thanks to the generosity of our patrons.<br><br></div><div><strong><br>Location:</strong> This role must be performed within the United States. Occasional travel to Portland, Oregon.</div><div><strong><br>Reporting to:</strong> Bradley Mumme, Security Program Manager<br><br></div><div><strong>Compensation &amp; Benefits<br></strong><br></div><ul><li>The annual salary range for this role is $100,000 - $135,000.<ul><li>Competitive salary that scales with experience directly related to this role.</li></ul></li><li>Medical, dental, vision, life, short- and long-term disability insurance for employees and families, with premiums covered 100% by BibleProject.</li><li>401(k) with 4% employer match.</li><li>Flexible PTO.</li><li>4 weeks of org-wide synchronized rest breaks.</li><li>Paid parental leave.</li><li>Paid learning stipend.</li><li>Home Office resources as needed.</li><li>A culture focused on belonging and thriving.<br><br></li></ul><div><br>BibleProject is an equal opportunity employer.<br><br></div><div><br></div>

CHRISTIAN DEVSECOPSJOBS