{"id":288802,"url":"https://alion.io/job/overflow-agency-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":116656,"name":"Overflow Agency","domain":"overflow.agency","url":"https://alion.io/company/overflow","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"C","score":64,"open_postings":10,"ghost_share":0.6,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":120000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"AWS","optional":false},{"name":"AWS Fargate","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"OWASP Top 10","optional":true}],"status":"live","first_seen_at":"2026-07-14T03:57:16Z","employer_posted_date":"2026-07-14","last_verified_at":"2026-10-29T04:00:19Z","board_verified":true,"closed_at":null,"days_open":107,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":107},"description":"Who We Are\nOverflow is a Series C, growth-stage technology company on a bold mission: to inspire the world to give. We're a vertical fintech and SaaS platform unlocking more ways to give - cash, stock, crypto, and beyond - through a beautifully designed ecosystem built for high-impact churches, nonprofits, and mission-driven institutions.\nBacked by Uncork Capital, Craft Ventures, Salesforce Ventures, R7, and WIF (one of the largest lenders to faith and philanthropic organizations in the country), we're building the infrastructure that makes generosity frictionless at scale.\nOur Founding Principles\nOverflow was founded on the belief that generosity transforms people and communities. Inspired by Proverbs 11:24 - \"The world of the generous gets larger and larger\" - we operate with integrity, stewardship, service, and excellence.\nHow We Work\nOverflow operates with a flexible work model. While there is no company-wide in-office requirement, some teams may establish in-person collaboration rhythms based on their function, goals, and team needs.\nWe maintain offices in Los Gatos, CA and Birmingham, AL for team collaboration, coworking, meetings, and intentional in-person connection.\nThe Role\nAs our first DevSecOps Engineer, you will lay the groundwork for our new Platform/DevOps team. Your primary focus will be on Site Reliability Engineering (SRE) and DevOps-keeping our systems highly available, scalable, and efficient-while embedding a strong security posture into everything we build.\nYou will build the \"paved road\" for our engineering teams by managing our containerized AWS environment, automating deployments and building out observability foundations. As we scale, you will be instrumental in maintaining our SOC 2 compliance and driving the technical architecture required for our upcoming PCI Level 1 certification.\nWhat You Will Do\nCloud Infrastructure & Platform Security\nSecure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management.\n\nRefine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices.\n\nDeploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents.\n\nSecure CI/CD & Developer Enablement\nOwn and optimize our continuous integration and deployment (CI/CD) pipelines.\n\n\"Shift Left\" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow.\n\nAct as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training.\n\nCompliance & Data Governance\nAction on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations)\n\nPartner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments.\n\nEnsure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.\n\nWhat You Should Have\nCore Experience: 5+ years in DevOps, Site Reliability, or Cloud Platform roles\n\nCloud Expertise: Deep, hands-on experience with Docker and AWS ECS Fargate\n\nCI/CD Automation: Extensive experience building and maintaining robust deployment pipelines using GitHub Actions.\n\nSecurity & Compliance: Practical experience maintaining SOC 2 technical controls and a strong understanding of the architectural requirements for PCI-DSS (ideally Level 1) compliance.\n\nIt'd Be Nice If You Had\nStartup DNA / Founding Experience: Previous experience as the first DevOps or SRE hire at a high-growth startup, comfortable taking ownership of the 0-to-1 platform build.\n\nFintech & Web3 Context: While not a day-one requirement, experience securing financial ledger systems, payment gateways, or blockchain/crypto infrastructure will be increasingly valuable as our platform evolves.\n\nOffensive Security Knowledge: Experience participating in bug bounties, conducting internal threat modeling, or a strong understanding of the OWASP Top 10.\n\nOur Compensation Philosophy\nThe base salary range for this position is $120k - $200k, based on Carta Total Compensation benchmarks for role, geography, and function. Total compensation may also include equity, performance-based bonuses (for eligible roles), and a comprehensive benefits package.\nBenefits & Perks\nCompetitive base salary with equity eligibility\n\nMedical, dental, and vision coverage for employees and dependents\n\nGenerous paid time off and company holidays\n\nPaid parental leave\n\n401(k) retirement plan\n\nDedicated mental health and therapy stipend to support personal well-being\n\nTeam retreats and intentional in-person gatherings throughout the year\n\nOverflow is proud to be an equal opportunity employer and is committed to building a diverse and inclusive team.","description_format":"text","description_chars":4967,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Blockchain & Crypto","Web Development Services","Digital Marketing"],"lifecycle":[{"event":"open","at":"2026-09-05T14:16:13Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.129,"p_room":0.28,"age_days":107,"expected_fill_days":7,"reasons":["conf:1","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/overflow-agency-devsecops-engineer","json_url":"https://alion.io/job/overflow-agency-devsecops-engineer.json","meta":{"generated_at":"2026-10-29T06:45:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10286,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":116656},"rest":"https://alion.io/mcp/rest/get_company?id=116656"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foverflow-agency-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foverflow-agency-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foverflow-agency-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/overflow-agency-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foverflow-agency-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":288802}},{"tool":"search_jobs","arguments":{"company":"overflow.agency","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":288802},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}