Member of Technical Staff, Envoy
Security/DevSecOps
$190-250k
+ Equity
Monday to Thursday in-office
4 days a week in office
Flexible workplace platform
Be an early applicant
Flexible workplace platform
201-500 employees
Be an early applicant
$190-250k
+ Equity
Monday to Thursday in-office
4 days a week in office
201-500 employees
Company mission
To create a world where workplaces work better.
Role
Who you are
- Autonomous and highly organized, thriving in a fast‑moving environment
- Passionate about enabling secure cloud engineering without blocking developer velocity
- Intellectually curious, always experimenting with new cloud security tooling and best practices
- A clear, concise communicator who can translate complex security topics for diverse stakeholders
- Hands‑on expertise securing AWS workloads, multi‑account architectures, and VPC design
- Deep knowledge of IAM policy design, role‑based access control, and least‑privilege enforcement
- Proficiency with Terraform or CloudFormation and experience implementing IaC security scans in CI/CD
- Demonstrated experience managing WAF solutions and mitigating web‑layer attacks (OWASP Top 10, bot mitigation)
- Experience hardening container images and Kubernetes/EKS clusters, plus familiarity with container runtime security
- Strong scripting skills in Python, Go, or similar for automation and tooling integration
- Experience performing cloud security risk assessments and threat modeling for new services
- Familiarity with AWS security tooling (GuardDuty, Config, Security Hub, Macie, Access Analyzer)
- Excellent written and verbal communication skills and the ability to educate engineers on secure practices
- Preferred certifications: AWS Certified Security – Specialty, CISSP, GIAC Cloud Security Automation (GCSA)
What the job involves
- Envoy’s engineering organization is scaling rapidly in the cloud. We are looking for an experienced Cloud Security / DevSecOps Engineer to harden our AWS environments, embed security into our CI/CD pipelines, and champion secure-by-default infrastructure practices
- We are looking for exceptional engineers to join our growing team at Envoy. We love to drive innovation in the workplace through hack projects. If you’re looking to challenge the status quo and build the Office OS. Come join us
- Design, implement, and continuously improve security controls in AWS, including IAM policies, VPC network segmentation, Security Groups, and secure service configuration (e.g., S3, RDS, Lambda)
- Own WAF management (Cloudflare WAF) — authoring rules, tuning managed rulesets, and monitoring attacks
- Integrate automated security guardrails into CI/CD pipelines (GitHub Actions) for IaC, container images, and serverless deployments
- Implement and enforce Infrastructure‑as‑Code (IaC) security scanning using tools such as tfsec, Trivy, Checkov, or Terrascan, with gating for critical findings
- Lead container and orchestration security for Docker and Kubernetes/EKS, including image scanning, admission controls, runtime monitoring (Falco), and benchmark enforcement (kube‑bench)
- Establish and operate secrets‑management best practices using tools like HashiCorp Vault, AWS Secrets Manager, or SOPS, ensuring least‑privilege access
- Deploy, tune, and maintain AWS security services — GuardDuty, Security Hub, Config, CloudTrail, IAM Access Analyzer — for continuous detection and compliance
- Conduct cloud threat modeling and risk assessments (STRIDE, AWS Well‑Architected Framework) to identify gaps and prioritize mitigations
- Automate security compliance reporting against frameworks such as CIS Benchmarks and NIST 800‑53 using IaC and policy‑as‑code (e.g., Open Policy Agent)
- Collaborate with infrastructure and product engineering teams to embed security early and unblock delivery velocity
Our take
Envoy is a visitor management platform. Envoy offers a raft of workplace management tools, which help businesses ensure that their shop floor runs efficiently.
Envoy has already helped organize tens of thousands of locations globally, and brings together several solutions in a flexible package. The platform manages hybrid schedules, welcomes guests, helps companies improve security, assists with the managing and booking of rooms for collaboration, and even plays a role in structuring mailrooms more effectively.
A 2022 series C funding round took the company to a valuation of over $1B. It has been invested into company growth and creating more tools for secure and connected workplaces.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-10% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Jan 2022
$111m
SERIES C
May 2020
$30m
LATE VC
Total funding: $200.2m
Company benefits
- Flexible time off to help you relax and recharge
- Learning and development stipends
- Full health coverage for you and your dependents
- A remote working credit to set up your home office
- $100 monthly wellness credit
- $100 headphone credit every 2 years
- A 401K, so you can invest in your future
- 12 weeks of paid parental leave
Company HQ
SoMa, San Francisco, CA
Leadership
Larry Gadea
(CEO)Software Engineering at Carleton University. Systems Performance Consultant at Milo and Shopify. Infrastructure Engineer at Twitter. Founded Envoy in 2013.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 21 more jobs at Envoy