Skip to content

Open nowPosted 128 days ago

Dev/Sec/Ops and Threat Engineering Specialist

suncore-digital10 open roles

Where
Scottsdale, AZ
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDev/Sec/Ops and Threat Engineering Specialistsuncore-digital · Scottsdale, AZ
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on suncore-digital's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: posted 128 days ago

The posting

Dev/Sec/Ops and Threat Engineering Specialist

Location: Remote (Global)

Offices: London, UK and Bellevue, WA

Employment Type: Full-time, ongoing hire

Company: SunCore Digital

Role Overview

SunCore Digital is strengthening its security and infrastructure foundation as we prepare for rapid scale across our global operations in London, Bellevue, and remote engineering hubs worldwide. We are hiring a Senior Dev/Sec/Ops and Threat Engineering Specialist who can blend DevOps, security engineering, penetration testing, and threat modeling into a unified, proactive security posture.

This role will work closely with engineering, product, design, marketing, operations, and compliance teams to secure our cloud environments, automate infrastructure, support our web and mobile app ecosystem, and ensure our systems remain resilient as we scale. You will also support the secure build-out of SunCore’s dashboard, mobile app, and KYC‑compliant sales flow.

Key Responsibilities

Dev/Sec/Ops and Infrastructure

• Build, maintain, and secure CI/CD pipelines for staging and production environments using GitHub

• Implement infrastructure-as-code and secure configuration management

• Harden cloud environments (DigitalOcean and other providers) for scale, reliability, and security

• Manage SSL/TLS certificates, DNS, and Cloudflare configurations

• Migrate and secure infrastructure components, including SiteGround to DigitalOcean transitions

• Optimize deployment workflows to reduce downtime and improve release reliability

• Support secure architecture for SunCore’s web platform, dashboard, and mobile app (Flutter)

Security Engineering

• Conduct regular penetration testing across applications, APIs, cloud infrastructure, and mobile components

• Perform threat modeling for new features, integrations, and system changes

• Monitor, identify, and remediate vulnerabilities using Dev/Sec/

Ops best practices

• Implement access control policies, secrets management, and API security standards

• Lead incident response planning, tabletop exercises, and recovery strategies

• Build automated security checks into CI/CD pipelines

• Ensure SOC2‑level security readiness, including SHA‑256 secure login and audit preparation

API and Third‑Party Integrations

• Secure and support integrations with: Binance, WhatToMine, Trulioo, Stripe, BitPay, , Docusign, OKTA, Zendesk

• Ensure secure CRM migration and workflows, including HubSpot CRM, Zapier automations, and web‑to‑lead flows

• Support secure onboarding and identity verification workflows across the KYC‑compliant sales flow:

Info → Product Overview → KYC → Payment → Contract → Secure Dashboard Access

Cross‑Functional Collaboration

• Work with UI/UX and digital marketing agencies to ensure secure implementation of design and content

• Partner with engineering leadership to establish best practices for code reviews, documentation, testing, and security

•Collaborate with compliance and operations to ensure regulated‑environment readiness

Qualifications

Required

• 3–6 years in DevOps, Security Engineering, or DevSecOps

• Hands-on experience with CI/CD tools such as GitHub Actions or Jenkins

• Strong knowledge of cloud infrastructure, Docker, Linux, and networking

• Experience with Cloudflare, SSL/TLS, DNS, and IAM/SSO systems like OKTA

• Familiarity with Trulioo or similar KYC/identity verification tools

• Experience with penetration testing tools and methodologies

• Ability to perform threat modeling and security risk assessments

• Strong understanding of secrets management, access control, and API security

• Experience supporting secure API integrations across multiple third‑party systems

• Excellent communication and documentation skills

• Ability to work independently in a fast-paced, async, global environment

Preferred

• Certifications such as OSCP, CEH, Security+, AWS/GCP Certified Security Engineer

• Experience in fintech, blockchain, or regulated industries

• Background in digital identity verification or secure user onboarding

• Experience in scale-up or startup environments

• Familiarity with Flutter, Node.js, Python, and secure mobile app architecture

Compensation

• Negotiable based on location

• Deferred to completion of Demo

• Role transitions into a permanent hire thereafter

Why Join SunCore Digital

• High-impact role shaping the security foundation of a rapidly scaling digital company

• Fully remote team with async flexibility and optional collaboration in London or Bellevue

• Direct partnership with executive leadership and top-tier engineering, marketing, and design partners

• Competitive compensation with performance upsidecomplmeof DD

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against suncore-digital's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on suncore-digital's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    suncore-digital's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.