DevSecOps Engineer

TROOP is a group meeting planning and travel management platform that helps companies bring teams together for in-person meetings. The experience starts with TROOP’s award-winning Intelligent Destination Recommendations, which use advanced algorithms to help meeting planners pinpoint the perfect meeting destination, considering travel time, climate impact, budget, lodging availability, and safety factors for all attendees. Using TROOP, companies have saved millions in travel costs, employee time, and carbon emissions, making it possible for people to meet and build stronger relationships with their colleagues, clients, and partners, even in times of tightening budgets and travel restrictions.

Why TROOP?

TROOP believes in the power of shared experiences and the unifying impact of in-person meetings. We are on a mission to bring people together by transforming the meeting planning process. At TROOP, we have ambitious goals to be the leading provider of end-to-end meeting planning tools. We started by inventing a completely new way for people to decide where to meet, but for us, the destination is just the beginning. We’re developing more innovative solutions that make it easier than ever to organize and host successful group meeting experiences.

TROOP's Culture?

TROOP is an international, remote-first company. Our colleagues are spread across the globe, with entities in Spain, South Africa, and the United States. Our culture is rooted in an African philosophy called "Ubuntu," which means "I am because we are." It refers to an environment of interdependence through trust. We call ourselves TROOPers, and we are people who seek adventure, challenge the status quo, enjoy innovating, and want to be part of something special. We are doers who roll up our sleeves and get into the details; we own the problem and only stop once it is solved.

TROOP is hiring a DevSecOps Engineer who combines technical expertise with a deep understanding of security, cloud infrastructure, and compliance frameworks. In this role, you will be a critical link between our technical teams, clients, and stakeholders - driving security best practices across the development lifecycle and ensuring our cloud infrastructure meets industry and regulatory compliance standards.

What you’ll be doing:

Security Automation and Infrastructure:

• Develop and implement automated security testing within CI/CD pipelines, including static analysis, dynamic analysis, and dependency scanning.
• Integrate security tools to automate vulnerability detection, access control, configuration management, and compliance monitoring.
• Continuously improve security policies, processes, and tools, adapting to new threats and changing regulatory requirements.

Client Interaction Collaboration:

• Engage with clients to understand their security requirements, compliance needs, and privacy expectations.
• Facilitate security and compliance discussions with internal teams, clients, and stakeholders to ensure alignment with security goals and objectives.

Compliance Management:

• Lead the implementation and management of compliance frameworks.
• Develop and maintain Policy-as-Code to enforce compliance policies within the CI/CD pipeline, ensuring security controls are applied consistently across environments.
• Conduct regular compliance audits, vulnerability assessments, and risk analyses to identify and mitigate potential compliance issues.
• Establish, document, and maintain security policies, including a Written Information Security Program (WISP).
• Collaborate with the Operations team to manage the MDM and strengthen endpoint security policies and posture.

Bounty Program Oversight:

• Implement and manage a bug bounty program, serving as the primary point of contact for vulnerability submissions and ethical hacker interactions.
• Triage and prioritize reported vulnerabilities, coordinating with development and security teams for swift remediation.
• Implement feedback loops to integrate insights from bug bounty reports into our security practices, minimizing recurring vulnerabilities.

Requirements

Experience Qualifications:

• 5-8 years’ in DevSecOps, Security Engineering, or a related role, with a strong background in security practices within the DevOps lifecycle.
• Hands-on experience implementing and managing compliance frameworks via platforms like Vanta.
• Relevant security qualifications (GCP/AWS/Azure).
• Proven experience engaging with clients to understand their security requirements, compliance needs, and privacy expectations, including international (US-based) clients.
• Experience working in fast-paced startup environments.

Technical Skills:

• Proficiency in security automation tools, including SAST, DAST, container security, and configuration management.
• Strong knowledge of CI/CD tools (GitLab CI) and infrastructure as code (Terraform).
• Experience with cloud platforms (GCP), containerization technologies (Kubernetes),networking, WAF and threat intelligence platforms (Cloudflare) with a focus on security and compliance.

Compliance Legal Knowledge:

• Familiarity with data privacy and regulations, especially SOC 2 Type 2, and experience in implementing privacy-by-design principles.
• Understanding of bug bounty program management and experience working with external researchers or bounty platforms.
• Ability to translate legal and regulatory requirements into actionable security policies and controls within the DevSecOps environment.

Soft Skills:

• Ability to work collaboratively with cross-functional teams, including Engineering, Product, and client-facing teams.
• Excellent communication and interpersonal skills, with the ability to explain complex security concepts in clear, professional English to non-technical stakeholders and clients.
• Strong problem-solving skills with a proactive and solution-oriented mindset.

Benefits

💻 Remote-first within our hubs: TROOP operates remotely with frequent in-person engagements, focusing on scaling within our legal entities in Spain, South Africa and the US.

🚀Join the Pioneering Team: As part of the initial team at TROOP, you'll be at the forefront of an extraordinary adventure. Picture yourself shaping the future of a fast-growing technology company where your ideas and contributions truly make a difference.

🎨 Discover an Incredible, Supportive Team and Diverse Culture: Prepare to be amazed by the exceptional individuals who form TROOP's team. Collaborate with brilliant, multicultural minds, where diverse backgrounds unite for unparalleled collaboration.

📈 Supported by Top Investors: TROOP's remarkable journey is backed by prestigious investors, such as the Madrona Group. Join forces with a company that has garnered the trust and support of the best in the industry. Read more about TROOP's Executive Chairman Steve Singh (Co-founder of Concur).

⏰ Paid Time Off: We provide 23 days per year, allowing you ample opportunity to relax, recharge, and have some well-deserved fun.

🩺 Comprehensive Health Coverage, 100% Covered and Tax Exempt with ASISA. Join Troop for worry-free health benefits—100% tax-exempt coverage. Your well-being is our priority. (Available in Spain)

💚 Mental Health Budget: Yearly budget assistance for mental health support for all our employees.

☀️Unforgettable Adventures: At TROOP, we cherish the bonds we create and the time we spend together. Each year, we embark on an incredible offsite to a surprise location, courtesy of TROOP. You'll have the opportunity to explore new cultures, create lasting memories, and bond with your colleagues in a unique and exciting way