{"id":3315532,"url":"https://alion.io/job/astreya-site-reliability-engineer-vulnerability","title":"Site Reliability Engineer - Vulnerability","company":{"id":1707,"name":"Astreya","domain":"astreya.com","url":"https://alion.io/company/astreya","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":38,"ghost_share":0,"stale_share":0.816,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-10-27T05:46:45Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"PST","utc_offset_min":-8,"utc_offset_max":-8},"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":114000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"FedRAMP","optional":false},{"name":"GitLab CI","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Jira","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Ruby","optional":false},{"name":"SBOM","optional":false},{"name":"AWS","optional":true},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-26T00:00:00Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-27T21:17:55Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Site Reliability Engineer - FedRAMP Vulnerability Management\nMeet the Team\nThe SRE Compliance & Security Initiatives team is responsible for maintaining the stability, scalability, and efficiency of the infrastructure and applications that power our FedRAMP cloud platform. As a team of five engineers distributed across the US, we combine deep infrastructure expertise with a strong focus on automation, reliability, and operational excellence. We are the primary SRE team working together with more than 20 other teams across SRE and the broader Engineering, Security and Product organizations to support a platform that serves a rapidly growing customer base that currently manages tens of thousands of devices. The team operates with a high degree of autonomy, giving engineers the opportunity to drive both critical initiatives and grassroots improvements that solve real operational challenges. One of our most exciting areas of focus is expanding our ability to build highly automated processes to increase the operational efficiency and security of our cloud environments that support evolving regulatory requirements. Everyone on the team has a voice, and engineers are encouraged to identify problems, propose solutions, and take ownership of improvements that make the platform more reliable and easier to operate.\nYour Impact\nOwn findings for FedRAMP Vulnerability Management from intake through validated remediation and closure. Triage and prioritize host, OS-package, container, base-image, and application-dependency findings using exploitability, asset criticality, and remediation timelines. Identify the real source of vulnerable software and determine whether the right action is a dependency update, image rebuild, promotion, host change, deviation, false-positive correction, or ticket cleanup. Implement or coordinate fixes through Ansible, GitLab CI, package managers, container builds, Artifactory, and Federal promotion-train workflows and validated promoted artifacts. Validate fixes using effective package versions, build artifacts, image manifests, deployed-host evidence, and scanner rescans before resolving vulnerability tickets. Maintain Jira evidence, ownership, due-date escalation, exception rationale, backlog metrics, runbooks, automation, and knowledge transfer. Success will mean reducing the overdue backlog, improving ownership and evidence quality, delivering repeatable automation and runbooks, and transferring a sustainable process to the CSI team for future use.\nDevelop and maintain automation solutions that improve the reliability, scalability, security and operational efficiency of infrastructure and processes for the hosts in our FedRAMP cloud environments, as well as new innovations that allow us to adjust to changing compliance requirements. Design and enhance deployment pipelines, testing frameworks, and operational tooling to support the continued growth of a platform serving a rapidly growing number of managed devices worldwide. Troubleshoot complex infrastructure and distributed systems issues to ensure high availability while helping teams adapt their infrastructure, applications and processes to FedRAMP controls and requirements. Contribute to critical projects such as refactoring our deployment process, and new cluster build outs by building automation that enables manual toil reduction, as well as rapid and repeatable processes for new purpose-built cloud environments. Partner with other engineering teams, product management, and business partners across multiple teams and time zones to understand platform dependencies, seek opportunities for improvement, and deliver solutions that enhance reliability and performance while reducing operational overhead.\nMinimum Qualifications\n5+ years of experience in Site Reliability Engineering, DevOps, Infrastructure Engineering, or a related role supporting cloud-based production environments.\nPractical vulnerability-management experience; familiarity with Qualys, JFrog Xray, SCA/SBOM, or equivalent tooling; as well as knowledge of dependency-management for Ruby/Bundler, Python/pip, and Go modules. Experience with direct versus transitive dependencies, version constraints, lockfiles, go.mod/go.sum, and verifying the effective version shipped in a built artifact.\nExperience developing and maintaining infrastructure automation using Ansible.\nExperience administering and troubleshooting Linux-based systems and distributed infrastructure environments.\nExperience designing, implementing, and maintaining CI/CD pipelines, including GitLab CI.\nExperience supporting large-scale infrastructure environments consisting of hundreds or thousands of systems.\nAvailable to be online from 9am-4pm PST. Preferred Qualifications\nFamiliarity with AWS or other public cloud platforms and hybrid infrastructure environments.\nKnowledge of monitoring, observability, and reliability engineering practices and tooling.\nFamiliarity with Kubernetes concepts and containerized application platforms.\nExperience employing AI-assisted development tools to improve software development, automation, operational analysis, and engineering productivity.\nExperience managing fleet wide software deployments\nExperience providing incident support and triage.\nSalary Range\n$114,000.00 - $180,000.00 USD (Salary)Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.\nFurther, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.\nAstreyaoffers comprehensivebenefits to all Regular, Full-Time Employees, including:\nMedical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only\n\nDental provided through UHC\n\nNationwide Vision provided by UHC\n\nFlexible Spending Account for Health & Dependent Care\n\nPre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)\n\nContinuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera\n\nCorporate Wellness Program provided by Goomi Group\n\nEmployee Assistance Program\n\nWellness Days\n401k Plan\n\nBasic and Supplemental Life Insurance\n\nShort Term & Long Term Disability\n\nCritical Illness, Critical Hospital, and Voluntary Accident Insurance\n\nTuition Reimbursement (available 6 months after start date, capped)\n\nPaid Time Off (accrued and prorated, maximum of 120 hours annually)\n\nPaid Holidays\n\nAny other statutory leaves, paid time, or other ancillary benefits required under state and federal law","description_format":"text","description_chars":7138,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Infrastructure & Networking Services","IT Help Desk & Service Desk"],"lifecycle":[{"event":"open","at":"2026-10-27T05:12:43Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":19,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/astreya-site-reliability-engineer-vulnerability","json_url":"https://alion.io/job/astreya-site-reliability-engineer-vulnerability.json","meta":{"generated_at":"2026-10-27T22:59:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14875,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1707},"rest":"https://alion.io/mcp/rest/get_company?id=1707"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fastreya-site-reliability-engineer-vulnerability"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fastreya-site-reliability-engineer-vulnerability"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fastreya-site-reliability-engineer-vulnerability"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/astreya-site-reliability-engineer-vulnerability\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fastreya-site-reliability-engineer-vulnerability"}]}