Angel Studios is hiring a
DevSecOps Engineer

Expectations at Angel Studios:

• Amplify light in every action.
• As the owner of your outcomes, you are empowered to break down silos and coordinate with any and all people you need in order to reach your goals. 
• You are ultimately responsible for achieving the outcomes while also using resources wisely - whether that be money, people, or time.
• Know your customer - it might be our viewers, investors, creators, or internal Angel Teams. Ensure you understand your customer and provide what THEY need, not just what you want to build. 
• You OWN the success of your team members, including hiring, onboarding, goals, performance management, raises, terminations, etc.
• Hold team members accountable to their goals - help them grow and make the most of the resources they bring. Document their performance for reviews. 
• Create opportunities for team members to take the initiative and ownership. 
• Give consistent and timely candid feedback with compassion - your team members need to know where they stand at all times. If you find yourself doubting a team member, address it swiftly with actionable feedback.
• Contributes in a way that moves the Angel mission forward and exemplifies the team qualities required for working at Angel.
• When faced with roadblocks, mistakes, or unforeseen circumstances, consistently and proactively find creative solutions and/or break down barriers to handle the challenge or complication. (Focus is on creating/building/testing/learning/resolution rather than getting stuck and identifying or placing blame).

Essential Functions:

• Integrate Security into CI/CD: Design, implement, and manage security tools and processes within the CI/CD pipeline (e.g., SAST, DAST, IAST, SCA, and container scanning).
• Automation: Develop and maintain automation scripts and tools to streamline security operations and incident response.
• Security Architecture: Collaborate with development and operations teams to design and implement secure infrastructure and application architectures in the cloud and in Kubernetes.
• Threat Modeling: Conduct threat modeling exercises for new and existing applications and systems.
• Security Monitoring & Incident Response: Implement and manage security monitoring solutions. Participate in incident response activities, including investigation, remediation, and post-mortem analysis.
• Compliance and Governance: Ensure systems and processes adhere to relevant security standards, regulations (e.g., ISO 27001, SOC 2, GDPR, HIPAA), and internal policies.
• Security Champion & Training: Promote security awareness and best practices across engineering teams. Provide training and guidance on secure coding practices and security tools.
• Cloud Security: Implement and manage security controls for cloud environments (e.g., AWS, GCP), including identity and access management (IAM), network security, and data protection.
• Documentation: Maintain comprehensive documentation for security processes, tools, and configurations.

Competencies:

• An exceptional listener with excellent written and verbal communication skills.
• Passionate about careful design & architectural planning that leads to a codebase that is future-proof and maintainable.
• Self-starter with the ability to seek out opportunities, create an action plan and see it through to fruition.
• Exceptional team player with the ability to understand the perspective of multiple stakeholders in compromising solutions for marketing, product, and data growth and development.
• Ability to take individual ownership, execute with high energy, share context, and insist on candor with positive intent.
• Be adaptive to new initiatives and functions required in order to solve problems for scale as they arise
• Enjoy the challenge and opportunity to lead and improve the development experience at Angel Studios by enhancing development tools, test coverage, and code structure.
• Detail-oriented perspective and ability to pick up on overlooked details.
• Familiarity with Cloud Based Platforms and services.
• Able to maintain the confidentiality of information.
• Must be able to manage multiple assignments, set priorities, and adapt to changing conditions.
• Resourceful and able to problem-solve and manage tasks with ambiguity. 
• Willing to perform an array of tasks both in and out of the office.
• Organization and time management. 
• Can take feedback on tasks and assignments positively and create better solutions.
• A quick study, able to pick up new skills and learn how to use new programs.

Required education and experience

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 5+ years experience in a DevSecOps, DevOps, or Security Engineering Role.
• 2+ years experience in AWS in a security-adjacent role.
• Hands-on experience with CI/CD tools (e.g. GitLab CI, GitHub Actions).
• Strong understanding of DevOps principles and CI/CD methodologies.
• Solid understanding of cloud security principles and experience in AWS.
• Understanding of common web application vulnerabilities (OWASP Top 10) and mitigation techniques.
• Knowledge of containerization technologies (e.g. Docker, Kubernetes) and their security implications.
• Familiarity with Infrastructure as Code (IaC) tools (e.g. Terraform, CloudFormation, Helm, Kustomize).
• Knowledge of network security concepts (firewalls, IDS/IPS, WAFs, VPNs).
• Experience with scripting languages (e.g. Python, Bash).

Preferred education and experience

• Relevant cloud and/or security certifications (e.g., Security+, CISSP, GSEC, CISM, AWS Solutions Architect, AWS Certified Security Specialty).
• Experience with secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager).
• Understanding of microservices architecture and serverless computing security.
• Contributions to open-source security projects.
• Background in incident response and/or penetration testing.