About the company
At Justworks, you'll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We're helping businesses get off the ground by enabling them to focus on running their business.
Responsibilities
- Own security automation across CI/CD pipelines (GitHub Actions): SAST, SCA, secrets detection, and container scanning
- Build security into golden path templates for Go, Rails, and Vue.js services
- Harden software supply chain: dependency management, artifact signing, SBOM generation, and provenance
- Implement and tune infrastructure-as-code scanning (Terraform) and Kubernetes policy enforcement
- Coordinate vulnerability exposure remediation across all of Engineering
- Build vulnerability management automation that routes findings to owning teams
- Own implementation of secrets management patterns and tooling
- Partner with the Security team on cloud security posture across AWS environments
- Support Security's rollout of agentic penetration testing
- Explore and roll out AI-assisted security review of code changes
- Drive adoption through documentation and developer education
- Measure time-to-remediate, scan coverage, secrets findings, and mean time to patch
Requirements
- Experience where security and engineering meet
- Comfortable in a CI/CD pipeline, an AWS account, and a Kubernetes cluster
- Ability to read application code to tell a real injection risk from scanner noise
- Experience building guardrails: pipelines that catch vulnerabilities, golden paths with security baked in
- Experience with Go, Rails, and Vue.js services
- Experience with Terraform and Kubernetes policy enforcement
- Experience with secrets management and federated identity
- Strong cross-functional collaboration and communication skills