DevSecOps Engineer

Who is Flock?

Flock Safety is an all-in-one technology solution to eliminate crime and keep communities safe. Our intelligent platform combines the power of communities at scale - including cities, businesses, schools, and law enforcement agencies - to shape a safer future together. Our full-service, maintenance-free technology solution is trusted by communities across the country to help solve and deter crime in the pursuit of safer communities for everyone.

Our holistic public safety platform is comprehensive and intelligent, providing the actionable evidence needed to solve, deter and reduce crime across neighborhoods, schools, businesses and entire cities. Without compromising transparency or privacy, we are turning unbiased data into objective answers.

Flock strives to offer a career-defining experience where you can also make an impact on your community. While safety is a serious business, we are a supportive team that is optimizing the remote experience to create strong and fulfilling relationships even when we are physically apart. Our group of hard-working employees thrive in a positive and inclusive environment, where a bias towards action is rewarded. 

We have raised over $700M in venture capital from investors including Tiger Global, Andreessen Horowitz, Matrix Partners, Bedrock Capital, Meritech Capital Partners, and Initialized Capital. Now surpassing a $7.5B valuation, Flock is scaling intentionally and seeking the best and brightest to help us meet our goal of reducing crime in the United States by 25% in the next three years.

The Opportunity 

We are looking for a DevSecOps Engineer to ensure that security is considered at every stage of the software development lifecycle. This role is crucial as it enables early detection and remediation of vulnerabilities, continuous security monitoring, and enforcement of secure coding practices. By hiring a DevSecOps engineer, we aim to enhance our automation of security testing and foster better collaboration between development, operations, and security teams. This will not only improve our overall efficiency but also secure our development processes. Addressing security issues early in the development cycle leads to substantial cost savings by reducing the need for post-release fixes and minimizing downtime. The presence of a DevSecOps engineer will enhance our capability to build secure software from the ground up, ultimately protecting our assets and ensuring our long-term success.

Job Duties and Responsibilities

• Perform code reviews on Typescript, Javascript, and Golang code bases

• Update and maintain DAST solution by managing tool configurations, deploying and monitoring scans

• Update and maintain SAST solution by managing configurations for security quality gates, responding to alerts and ensuring the solution’s tight integration in to build pipelines

• Perform impact assessments on newly discovered vulnerabilities while also meeting compliance standards

• Build out dashboards and alerts to assist in Vulnerability Management

• Work with various stakeholders to ensure efficient response to issues detected by security tooling

• Build and maintain partnerships with engineering teams

• Help identify and automate repetitive tasks

• Measure value and impact of DevSecOps initiatives and prepare progress and impact reports to share with leadership

• Implement and maintain container best security practices within Docker and Kubernetes environments.

• Respond to security incidents and perform root cause analysis

The Skillset

• Excellent communication skills

• Ability to read, understand, and write Typescript, Javascript, or Golang

• Ability to present complex technical topics to non-technical audiences

• Experience writing standard operating procedures, system requirements and other technical documentation

• Working knowledge of software-defined lifecycles and deployments

• Ability to conduct code and security architecture reviews

• 5+ years of experience of software engineering experience

• 5+ years of experience working AWS

• Experience with CI/CD pipelines using Github, Terraform, and Jenkins

• Knowledge of containerized technologies like Kubernetes and Docker

• Knowledge of the concept of golden images, creating, maintaining, and deploying.

• Experience conducting SAST, and DAST testing, assessing results, and remediating findings

• Working knowledge of OWASP Top 10 & SANS Top 25

90 Days at Flock

We are a results-oriented culture and believe job descriptions are a thing of the past. We prescribe to 90 day plans and believe that good days, lead to good weeks, which lead to good months. This serves as a preview of the 90 day plan you will receive if you were to be hired as a DevSecOps Engineer Flock Safety. 

The First 30 Days

• In the first 30 days, you'll onboard, meet key stakeholders, understand our pipeline and environment, gather feedback, and implement a quick win to build momentum on your journey.

The First 60 Days 

• By the end of 60 days, you will have taken ownership of your role, understood our key AWS services and CI/CD pipeline, identified weaknesses, and made recommendations to improve security in these realms, including a formalized remediation process

90 Days & Beyond 

• By the end of 90 days, you'll lead security projects, implement security features, deploy auto-remediation rules, review PRs and architecture, and contribute to security planning and documentation.

The Interview Process 

We want our interview process to be a true reflection of our culture: transparent and collaborative. Throughout the interview process, your recruiter will guide you through the next steps and ensure you feel prepared every step of the way. 

1. Our First Chat: During this first conversation, you’ll meet with a recruiter to chat through your background, what you could bring to Flock, what you are looking for in your next role, and who we are. 

2. The Hiring Manager Interview: You will meet with your potential future boss to really dive into the role, the team, expectations, and what success means at Flock. This is your chance to really nerd out with someone in your field. 

3. The Technical Assessment: Our technical assessments seek to test the hard skills required to do the job. Engineers may find themselves in coding interviews or architecture discussions, sales roles may present mock discovery calls, and leadership roles may craft 90 day plans. Your recruiter will inform you of which assessment you will be assigned and ensure you are fully prepared for your big day. 

4. The Panel: Learn more about the team, responsibilities, and workflows. You should be prepared to speak about past projects, how you collaborate and communicate with others, and how you live our values. Depending on the team and role you are interviewing for, you may meet with several teammates as well as cross-functional partners. 

5. The Executive Review: A chance to meet an executive and view Flock from a different lens. Be prepared to ask well-thought-out questions about the company, culture, and more. 

The Perks 

💰Salary & Equity: In this role, you’ll receive a starting salary of $120,000-$170,000 as well as stock options

🌴Flexible PTO: We seriously mean it, plus 11 company holidays.

⚕️Fully-paid health benefits plan for employees: including Medical, Dental, and Vision and an HSA match. 

👪Family Leave: All employees receive 12 weeks of 100% paid parental leave. Birthing parents are eligible for an additional 6-8 weeks of physical recovery time.

🍼Fertility & Family Benefits: We have partnered with Maven, a complete digital health benefit for starting and raising a family. In 2024, Flock will provide a $ 50,000-lifetime maximum benefit related to eligible adoption, surrogacy, or fertility expenses.

🧠Mental Health: All employees receive an annual subscription to Headspace.

💖Caregiver Support: We have partnered with Cariloop to provide our employees with caregiver support 

💸Carta Tax Advisor: Employees receive 1:1 sessions with Equity Tax Advisors who can address individual grants, model tax scenarios, and answer general questions. 

💚ERGs: We want all employees to thrive and feel like they belong at Flock. We offer three ERGs today - Women of Flock, Flock Proud, and Melanin Motion. If you are interested in talking to a representative from one of these, please let your recruiter know.

💻WFH Stipend: $150 per month to cover the costs of working from home.

📚Productivity Stipend: $250 per year to use on Audible, Calm, Masterclass, Duolingo, Grammarly and so much more.

🏠Home Office Stipend: A one-time $750 to help you create your dream office.

🏢Coworking Space: If you’re not local to our ATL HQ, we’ll provide $250 a month to get you set up with an All Access Membership to WeWork (or a local coworking space in your area).

🐾Pet Insurance: We’ve partnered with Pumpkin to provide insurance for our employee’s fur babies. 

Flock is an equal opportunity employer. We celebrate diverse backgrounds and thoughts and welcome everyone to apply for employment with us. We are committed to fostering an environment that is inclusive, transparent, and collaborative. Mutual respect is central to how Flock operates, and we believe the best solutions come from diverse perspectives, experiences, and skills. We embrace our differences and know that we are stronger working together.

If you need assistance or an accommodation due to a disability, please email us at [email protected]. This information will be treated as confidential and used only to determine an appropriate accommodation for the interview process.

Flock is an equal opportunity employer. We celebrate diverse backgrounds and thoughts and welcome everyone to apply for employment with us. We are committed to fostering an environment that is inclusive, transparent, and collaborative. Mutual respect is central to how Flock operates, and we believe the best solutions come from diverse perspectives, experiences, and skills. We embrace our differences and know that we are stronger working together.

If you need assistance or an accommodation due to a disability, please email us at [email protected]. This information will be treated as confidential and used only to determine an appropriate accommodation for the interview process.

At Flock Safety, we compensate our employees fairly for their work. Base salary is determined by job-related experience, education/training, as well as market indicators. The range above is representative of base salary only and does not include equity, sales bonus plans (when applicable) and benefits. This range may be modified in the future. This job posting may span more than one career level.