{"id":3883976,"url":"https://alion.io/job/upgrade-principal-devsecops-developer","title":"Principal DevSecOps Developer","company":{"id":20596,"name":"Upgrade","domain":"upgrade.com","url":"https://alion.io/company/upgrade","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":{"min":150000,"max":200000,"currency":"CAD","period":"year","gross":null,"usd_annual":142917},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"Akamai","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Okta","optional":false},{"name":"osquery","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Sumo Logic","optional":false},{"name":"Terraform","optional":false},{"name":"Tines","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"OWASP","optional":true}],"status":"live","first_seen_at":"2026-11-06T16:21:18Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T16:33:09Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Upgrade helps customers move in the right direction with affordable and responsible financial products. Since 2017, we’ve helped over 7.5 million customers access over $42 billion in consumer credit. With a relentless focus on improving our customers' financial well-being, we build products that put more money in their pocket and support their journey toward a better financial future. We’re backed by some of the most prominent technology investors and were most recently valued at $7.3B.\nWe’re consistently recognized for our collaborative and inclusive culture. Most recently, we were named one of the World’s Top Fintech Companies by CNBC, Best Places to Work by Built In, Best Places to Work by the San Francisco Business Times, America’s Greatest Workplaces by Newsweek, Best Startup Employer by Forbes, and Healthiest Employers by Phoenix Business Journal. \nWe’re looking for new team members who get excited about designing and delivering new and better products. Come join us and help build a better financial future for millions of people.\nAbout the Role:\nWe are looking for a highly technical, hands-on Principal DevSecOps Developer to join Upgrade's Security team. In this role, you'll focus on building and improving security automation, strengthening our SaaS environment, and developing scalable solutions that enhance security operations across the organization.\nYou'll leverage your programming and scripting skills, hands-on operations experience, and understanding of APIs, IAM permissions, and security best practices to solve complex technical challenges. You'll analyze code, troubleshoot technical issues, and apply risk-based thinking to identify vulnerabilities and implement effective security controls.\nThis is a highly autonomous, engineering-focused role where you'll have the opportunity to build security automations from the ground up, leverage AI to improve workflows, and solve challenging security problems. You'll work closely with Security, Engineering, DevOps, and IT teams to streamline processes.\nOur Core Technologies:\n AWS (IAM, Security Services), Terraform, Python, Bash, REST APIs, AI/LLM Tools (Claude, AI Agents, MCP), Tines/SOAR, Sumo Logic, CrowdStrike, Okta, Akamai, Sublime Security, SIGMA/YARA, Kubernetes, Docker, CI/CD Pipelines, FleetDM/osquery, GCP, Google Workspace, Microsoft Entra ID, Microsoft 365.\nWhat You’ll Do:\nBuild and maintain security automation workflows to reduce manual processes.\nDevelop and manage infrastructure as code using Terraform.\nImplement AWS security controls, including IAM policies and least-privilege access.\nBuild secure integrations between systems using APIs and scripting.\nIdentify, investigate, and resolve security risks across cloud infrastructure and internal systems.\nUse AI tools, agents, and MCP integrations to improve security workflows.\nTroubleshoot issues across infrastructure, networking, and security tools.\nDevelop and improve security monitoring, detection, and response capabilities.\nPartner with Engineering, DevOps, and IT teams to implement security improvements.\nProactively identify opportunities to strengthen security and automate processes.\nWhat We Look For:\nStrong programming, scripting, and automation skills across one or more languages.\nHands-on AWS security experience, including IAM permissions and least-privilege principles.\nStrong Terraform skills, including independently writing and maintaining modules.\nSolid understanding of APIs, authentication, and secure integrations.\nKnowledge of security fundamentals, risk analysis, and cloud security best practices.\nStrong troubleshooting skills across infrastructure, networking, and technical operations.\nExperience using AI development tools while independently validating generated code.\nFamiliarity with AI agents, automation frameworks, or MCP integrations.\nAbility to work independently and solve complex technical problems.\nStrong communication, collaboration, and problem-solving skills.\nNice to Have:\nExperience with Tines or other SOAR platforms.\nFamiliarity with CrowdStrike, Okta, Akamai, or Sublime Security.\nExperience with Sumo Logic or similar monitoring tools.\nExperience writing SIGMA or YARA detection rules.\nUnderstanding of event-driven architecture and enterprise IT systems.\nExperience with Kubernetes and container security.\nKnowledge of OWASP principles, including LLM/AI security.\nExperience with FleetDM, osquery, or endpoint security tools.\nFamiliarity with GCP, Google Workspace, or Microsoft Entra ID.\nExperience with CI/CD pipeline security or software supply chain security.\nThreat hunting or security investigation experience.\nExposure to security compliance frameworks.\nWhat Will Make You Successful:\nYou take ownership and work independently with minimal direction.\nYou identify problems and proactively develop solutions.\nYou are curious, adaptable, and eager to learn new technologies.\nYou use AI effectively without relying on it for every task, and are able to leverage your own knowledge and experience to challenge its assertions.\nYou communicate openly and collaborate well across teams.\nYou enjoy improving processes and making a measurable impact.\nWhat We Offer You: \nCompetitive salary ($150k-$200k+) and stock option plan\nPaid coverage of medical, dental and vision insurance \nFlexible PTO\nOpportunities for professional growth and development \nPaid parental leave\nHealth & wellness initiatives","description_format":"text","description_chars":5414,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave","Vision insurance"],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Cards & Card Issuing","Consumer Loans & Pawnshops","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-11-06T19:04:10Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":1,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"High Wage","cap_exempt":false,"checked_at":"2026-11-07T07:57:00+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":38,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":142917,"is_top_pay":false},"html_url":"https://alion.io/job/upgrade-principal-devsecops-developer","json_url":"https://alion.io/job/upgrade-principal-devsecops-developer.json","meta":{"generated_at":"2026-11-07T16:59:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24438,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20596},"rest":"https://alion.io/mcp/rest/get_company?id=20596"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fupgrade-principal-devsecops-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fupgrade-principal-devsecops-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fupgrade-principal-devsecops-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/upgrade-principal-devsecops-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fupgrade-principal-devsecops-developer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3883976}},{"tool":"search_jobs","arguments":{"company":"upgrade.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3883976},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}