Skip to content

Open nowPosted 81 days ago

DevSecOps Engineer

Overflow9 open roles

Pay
$120,000 – $200,000 a year
Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps EngineerOverflow · Remote
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Overflow's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 1.7%1 day
  2. 3.5%3 days
  3. 7.8%7 days
  4. 14.6%14 days
  5. 34.1%30 days
This job: posted 81 days ago

The posting

WHO WE ARE

Overflow is a Series C, growth-stage technology company on a bold mission: to inspire the world to give. We're a vertical fintech and SaaS platform unlocking more ways to give — cash, stock, crypto, and beyond — through a beautifully designed ecosystem built for high-impact churches, nonprofits, and mission-driven institutions.

Backed by Uncork Capital, Craft Ventures, Salesforce Ventures, R7, and WIF (one of the largest lenders to faith and philanthropic organizations in the country), we're building the infrastructure that makes generosity frictionless at scale.

OUR FOUNDING PRINCIPLES

Overflow was founded on the belief that generosity transforms people and communities. Inspired by Proverbs 11:24 — "The world of the generous gets larger and larger" — we operate with integrity, stewardship, service, and excellence.

HOW WE WORK

Overflow operates with a flexible work model. While there is no company-wide in-office requirement, some teams may establish in-person collaboration rhythms based on their function, goals, and team needs.

We maintain offices in Los Gatos, CA and Birmingham, AL for team collaboration, coworking, meetings, and intentional in-person connection.

THE ROLE

As our first DevSecOps Engineer, you will lay the groundwork for our new Platform/DevOps team. Your primary focus will be on Site Reliability Engineering (SRE) and DevOps—keeping our systems highly available, scalable, and efficient—while embedding a strong security posture into everything we build.

You will build the "paved road" for our engineering teams by managing our containerized AWS environment, automating deployments and building out observability foundations. As we scale, you will be instrumental in maintaining our SOC 2 compliance and driving the technical architecture required for our upcoming PCI Level 1 certification.

WHAT YOU WILL DO

Cloud Infrastructure & Platform Security

- Secure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management.

- Refine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices.

- Deploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents.

Secure CI/CD & Developer Enablement

- Own and optimize our continuous integration and deployment (CI/CD) pipelines.

- "Shift Left" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow.

- Act as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training.

Compliance & Data Governance

- Action on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations)

- Partner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments.

- Ensure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.

WHAT YOU SHOULD HAVE

- Core Experience: 5+ years in DevOps, Site Reliability, or Cloud Platform roles

- Cloud Expertise: Deep, hands-on experience with Docker and AWS ECS Fargate

- CI/CD Automation: Extensive experience building and maintaining robust deployment pipelines using GitHub Actions.

- Security & Compliance: Practical experience maintaining SOC 2 technical controls and a strong understanding of the architectural requirements for PCI-DSS (ideally Level 1) compliance.

IT'D BE NICE IF YOU HAD

- Startup DNA / Founding Experience: Previous experience as the first DevOps or SRE hire at a high-growth startup, comfortable taking ownership of the 0-to-1 platform build.

- Fintech & Web3 Context: While not a day-one requirement, experience securing financial ledger systems, payment gateways, or blockchain/crypto infrastructure will be increasingly valuable as our platform evolves.

- Offensive Security Knowledge: Experience participating in bug bounties, conducting internal threat modeling, or a strong understanding of the OWASP Top 10.

OUR COMPENSATION PHILOSOPHY

The base salary range for this position is $120k – $200k, based on Carta Total Compensation benchmarks for role, geography, and function. Total compensation may also include equity, performance-based bonuses (for eligible roles), and a comprehensive benefits package.

BENEFITS & PERKS

- Competitive base salary with equity eligibility

- Medical, dental, and vision coverage for employees and dependents

- Generous paid time off and company holidays

- Paid parental leave

- 401(k) retirement plan

- Dedicated mental health and therapy stipend to support personal well-being

- Team retreats and intentional in-person gatherings throughout the year

Overflow is proud to be an equal opportunity employer and is committed to building a diverse and inclusive team.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Overflow's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Overflow's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Overflow's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.