DevSecOps Engineer, TROOP
More information about location
Meetings management platform
Be an early applicant
Meetings management platform
21-100 employees
Be an early applicant
More information about location
21-100 employees
Company mission
To make meeting planning easy for everyone.
Role
Who you are
- Min 5+ years in DevSecOps, Security Engineering, or a related role, with a strong background in security practices within the DevOps lifecycle
- Proven experience managing compliance frameworks
- Relevant security qualifications
- Experience working in fast-paced startup environments
- Proficiency in security automation tools, including SAST, DAST, container security, and configuration management
- Strong knowledge of CI/CD tools (GitLab CI) and infrastructure as code (Terraform)
- Experience with cloud platforms (GCP, AWS) and containerization technologies (Kubernetes) with a focus on security and compliance
- Familiarity with data privacy regulations, especially GDPR, and experience in implementing privacy-by-design principles
- Understanding of bug bounty program management and experience working with external researchers or bounty platforms
- Ability to translate legal and regulatory requirements into actionable security policies and controls within the DevSecOps environment
- Excellent communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders and clients
- Strong problem-solving skills with a proactive and solution-oriented mindset
- Ability to work collaboratively with cross-functional teams, including development, legal, and client-facing teams
What the job involves
- TROOP is hiring for a DevSecOps Engineer who combines technical expertise with a deep understanding of security and compliance frameworks
- In this role, you will be a critical link between our technical teams, clients, and stakeholders, driving security best practices within the development lifecycle and ensuring our compliance with industry and regulatory standards
- Engage with clients to understand their security requirements, compliance needs, and privacy expectations
- Act as a trusted advisor to clients on DevSecOps best practices, security architecture, and compliance strategies
- Facilitate security and compliance discussions with internal teams, clients, and stakeholders to ensure alignment with security goals and objectives
- Lead the implementation and management of compliance frameworks
- Develop and maintain Policy-as-Code to enforce compliance policies within the CI/CD pipeline, ensuring security controls are applied consistently across environments
- Conduct regular compliance audits, vulnerability assessments, and risk analyses to identify and mitigate potential compliance issues
- Establish, document, and maintain security policies, including a Written Information Security Program (WISP)
- Manage bug bounty programs, serving as the primary point of contact for vulnerability submissions and ethical hacker interactions
- Triage and prioritize reported vulnerabilities, coordinating with development and security teams for swift remediation
- Implement feedback loops to integrate insights from bug bounty reports into our security practices, minimizing recurring vulnerabilities
- Implement and maintain data protection practices in line with GDPR and other privacy regulations, focusing on areas such as data encryption, access control, and data minimization
- Automate processes to handle data subject rights requests, such as data erasure and portability, in compliance with GDPR requirements
- Conduct Privacy Impact Assessments (PIAs) and ensure privacy-by-design principles are integrated into the development lifecycle
- Develop and implement automated security testing within CI/CD pipelines, including static analysis, dynamic analysis, and dependency scanning
- Integrate security tools to automate vulnerability detection, access control, configuration management, and compliance monitoring
- Continuously improve security policies, processes, and tools, adapting to new threats and changing regulatory requirements
- Collaborate with legal and compliance teams to interpret new regulations and understand their impact on the business and product development
- Maintain up-to-date knowledge of relevant legal and regulatory requirements and proactively drive necessary changes in DevSecOps practices
- Serve as a security and compliance resource for legal inquiries, audits, and regulatory reporting
Our take
TROOP is a meetings management platform for hybrid and global teams, delivering data-based and complete meeting strategies that reduce costs, increase engagement, and reduce CO2 footprints.
TROOP's self-serve platform takes into account data such as travel time and transport method to provide optimized meeting locations and timings for distributed teams. Its results can be visualized and shared via the inbuilt dashboard, allowing organizers to collaborate with participants and make quick, effective choices.
Seeing a surge in use as remote working became more popular, TROOP captured interest that allowed it to build a portfolio of case studies. The platform's ability to take into account corporate CO2 goals is likely what will attract further users, and it will be interesting to see how the company operates into the future.
Steph
Company Specialist at Welcome to the Jungle
Insights
Few candidates hear
back within 2 weeks
71% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Mar 2023
$11m
SERIES B
Sep 2021
$8m
SERIES A
Total funding: $19.9m
Company benefits
- Work from home with a global and diverse team. Look forward to international, in-person meet-ups.
- Join our team and help define it. Diversity is a key company objective. Join us. Be you.
- A focus on wellbeing ensures no one feels alone or without the information, help or support they need.
- We're not here to track your time but to enable your best performance. You're measured by what matters.
- Digital nomad friendly - Wherever and however you perform at your best, that is where we want you to be.
- A flat structure and a massive quest for openness and transparency in how we work and share.
Company values
- Trust: Whether for our team, client, investors or partners, nothing valuable is created without true and proven trust.
- Hack-away: We don’t settle for good enough. We push to the utmost excellence.
- Ubuntu: I am because we are. We find deep, personal meaning in our connection with each other.
- Fast and spectacular: The best results at the speed of light. That is the TROOP way.
- Humble yet hungry: No matter what we have accomplished, there is still a world of opportunity out there.
Company HQ
Villanueva del Pardillo, Spain
Articles
Leadership
Dennis Vilovic
(Co-Founder)Former Business Development Director of the Entrepreneurs' Organization.
Leonard Cremer
(Co-Founder)Group COO at Integrat Pty Ltd. Previously CCO at Integrat.
Share this job
View 3 more jobs at TROOP