Job description

Join Notability and shape the future of learning. We’re building the next generation of tools designed not just to capture notes, but to fundamentally improve how people learn, think, and collaborate. Our app brings the natural expressiveness of paper into the digital age, empowering millions of students, educators, and professionals worldwide to organize their ideas, deepen their understanding, and achieve their goals. Our mission is simple: we help you learn. As part of our team, you’ll help create experiences driven by empathy, exceptional design, and the belief that great ideas can come from anywhere—including you. Come help us make learning better for everyone. We're looking for a Sr DevSecOps Engineer with strong network security expertise to help build, secure, and maintain our cloud infrastructure. You'll build infrastructure automation, CI/CD pipelines, and defensive security measures to ensure our systems are reliable, scalable, and secure. What You'll Do Design, implement, and maintain cloud infrastructure (GCP) Build and optimize CI/CD pipelines for automated testing and deployment Implement network security controls, including firewalls, VPNs, and segmentation Monitor systems for security threats and respond to incidents Manage container orchestration (Kubernetes, Docker) Automate infrastructure provisioning using Terraform Conduct security audits and implement remediation measures Implement observability solutions (logging, metrics, tracing, alerting) Collaborate with development teams on secure architecture decisions Optimize cloud costs and resource utilization Maintain disaster recovery and backup strategies What You Need 5+ years of experience in DevSecOps, SRE, or infrastructure engineering Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs) Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR) Extensive knowledge of secure best practices for Cloud based Infrastructure Proficiency in scripting (Python, Bash, Go) You speak and write in Infrastructure as code, with an enthusiasm for automation, and a passion for scalable and reproducible security practices You possess broad security knowledge to connect the dots across domains and identify holistic ways to decrease the overall threat surface Have a strong grasp of offensive security to anticipate risks from an adversary's perspective, not just check compliance boxes Experience with compliance frameworks (SOC 2, ISO27001, HIPAA, or PCI-DSS) Proficiency with monitoring and observability tools (Prometheus, Grafana, PagerDuty) Knowledge of secrets management and identity/access management Excellent communication skills Bring experience with modern application stacks, infrastructure, and security tools to implement pragmatic defenses Experience with vulnerability management and threat hunting Bonus Points Experience with Typescript and SQL Security certifications (CISSP, CEH, AWS Security Specialty) Experience with zero-trust architecture Background in penetration testing or vulnerability assessment For this position we are targeting a base pay between $185,000-$243,000. Actual compensation offered will be determined by factors such as job-related knowledge, skills, and experience. This role follows a hybrid model, with a minimum of two days onsite at our downtown San Francisco office and flexibility to work remotely from home the rest of the week. How We Work Each member of our team contributes to all parts of our products. We trust each other to make decisions independently while also considering our common goals and values. We share ideas openly, and we collaborate across disciplines to ensure that our decisions make sense from all perspectives. When We Work We actively promote work-life balance. Our schedules are flexible, our hybrid policy supports remote work when it makes sense, and we have a “as long as you get your work done” approach to time off. Why You'd Love Working Here We work in downtown SF near Market Street, just a short walk from two BART/Muni stations. Our office has height-adjustable desks to help us stay limber, spacious conference rooms for both small and large team meetings, and a well-stocked kitchen full of goodies to enjoy :). Our team is growing, collaborative and down to earth. We want everyone to do their best work and find passion in what they do. Benefits Competitive compensation that includes base salary, bonuses and profit sharing Equity Awards in the form of Stock Options Comprehensive healthcare fully covered for you and your family including medical, dental, and vision Flexible work and vacation schedules 401k with matching contributions Matching gifts to nonprofits Lunch Stipend (When Working from HQ) Public transit stipend Home workstation reimbursement ISP stipend Monthly phone bill stipend Notability is proud to be an Equal Opportunity employer committed to diversity and inclusivity in the workplace. All aspects of employment are decided on the basis of merit, qualifications, and business needs. We do not discriminate based upon race, color, religion, sex, sexual orientation, age, national origin, disability status, protected veteran status, gender identity or any other characteristic protected by federal, state or local laws.

Requirements

Must-haves

Design, implement, and maintain cloud infrastructure (GCP)
Build and optimize CI/CD pipelines for automated testing and deployment
Implement network security controls, including firewalls, VPNs, and segmentation
Monitor systems for security threats and respond to incidents
Manage container orchestration (Kubernetes, Docker)
Automate infrastructure provisioning using Terraform
Conduct security audits and implement remediation measures
Implement observability solutions (logging, metrics, tracing, alerting)
Collaborate with development teams on secure architecture decisions
Optimize cloud costs and resource utilization
Maintain disaster recovery and backup strategies
What You Need
5+ years of experience in DevSecOps, SRE, or infrastructure engineering
Strong understanding of networking (TCP/IP, DNS, load balancing, CDNs)
Experience with security tools (WAFs, CNAPP, IDS/IPS, SIEM, SOAR)
Extensive knowledge of secure best practices for Cloud based Infrastructure
Proficiency in scripting (Python, Bash, Go)

Nice-to-haves

Experience with Typescript and SQL
Security certifications (CISSP, CEH, AWS Security Specialty)
Experience with zero-trust architecture
Background in penetration testing or vulnerability assessment
When We Work
We actively promote work-life balance. Our schedules are flexible, our hybrid policy supports remote work when it makes sense, and we have a “as long as you get your work done” approach to time off.
Why You'd Love Working Here

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

ci/cdgcpkubernetesdockerpythongotypescriptsqlawsrest

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k