DevOps Engineer

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.About the Role:We're seeking a talented DevSecOps Engineer to join the NG SIEM Onum team and work directly with our security and infrastructure leadership. This role is critical in embedding security-first practices into our development lifecycle while maintaining the agility and speed that defines our innovation culture. You'll be instrumental in securing our CI/CD pipelines, infrastructure, and applications while enabling developers to ship secure code faster.What You'll Do:Security Integration & Automation (40%):Embed security controls throughout the entire DevOps lifecycle, from code commit to production deploymentDesign and implement automated security gates within CI/CD pipelines using tools like GitHub Actions, Jenkins, or GitLab CIBuild security-as-code frameworks that make secure practices the default path for developersAutomate compliance checks and security policy enforcement across cloud infrastructure (AWS, GCP)Develop custom security tooling to address Onum specific security requirementsVulnerability & Risk Management (25%): Proactively identify and remediate security vulnerabilities in applications, containers, and infrastructureConduct threat modeling for new services and features before they reach productionPerform risk assessments on architectural decisions and third-party integrationsManage vulnerability lifecycle from detection through remediation, tracking metrics and SLAsImplement and maintain vulnerability scanning tools  integrated into development workflowsSecurity Testing & Validation (20%): Execute comprehensive security testing including SAST, DAST, SCA, and container security scanningPerform code reviews with a security lens, identifying potential vulnerabilities before mergeValidate security controls through continuous testing and red team exercisesEstablish security testing standards and ensure coverage across the projectIncident Response & Collaboration (15%): Help to respond to security incidents affecting Onum’s infrastructure and applicationsCollaborate with CrowdStrike SOC and incident response teams during security eventsConduct post-incident reviews and implement preventive measuresWork cross-functionally with development, operations, and security teams to foster shared security responsibilityPartner with the Manager on strategic security initiatives and architectural decisionsWhat You'll Need:Technical Expertise: 3+ years of experience in DevOps, Security Engineering, or related rolesStrong programming skills in Python, Go, or similar languages for automation and toolingDeep knowledge of cloud platforms, particularly AWS (EC2, S3, VPC, Security Groups, CloudTrail)Hands-on experience with:Containerization: Docker, container security best practicesOrchestration: Kubernetes, EKS, security policies, RBACIaC: Terraform, CloudFormation, security scanning for IaCCI/CD: GitHub Actions, Jenkins, GitLab CI, security pipeline integrationConfiguration Management: Ansible, Chef, or PuppetSecurity Knowledge: Strong understanding of:OWASP Top 10 and secure coding practicesNetwork security, firewalls, ACLs, and segmentationSecrets management (HashiCorp Vault, AWS Secrets Manager)Security compliance frameworks (SOC 2, ISO 27001, NIST)Experience with security tools:Vulnerability scanners (Nessus, Qualys, Rapid7)SAST/DAST tools (SonarQube, Checkmarx, Burp Suite)Container security (Trivy, Aqua, Twistlock)SIEM and log analysisGit security scanning (GitGuardian, TruffleHog)Soft Skills: Excellent communication - ability to explain complex security concepts to developers and leadershipCollaborative mindset - security is a team sport at CrowdStrikeProblem-solving orientation - creative approaches to balancing security and developer velocitySelf-motivated - ability to work independently and drive initiatives to completionAdaptability - comfortable in a fast-paced, innovative environmentBonus Points: Security certifications: AWS Security Specialty, CKS (Certified Kubernetes Security Specialist), Certified DevSecOps Professional (CDP), GIAC Cloud Security Automation (GCSA) or equivalen security certifications.Contributions to open-source security projectsFamiliarity with zero-trust architecture principles#LI-MB1Benefits of Working at CrowdStrike: Remote-friendly and flexible work cultureMarket leader in compensation and equity awardsComprehensive physical and mental wellness programsCompetitive vacation and holidays for rechargePaid parental and adoption leavesProfessional development opportunities for all employees regardless of level or roleEmployee Networks, geographic neighborhood groups, and volunteer opportunities to build connectionsVibrant office culture with world class amenitiesGreat Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.