Staff DevSecOps & Infrastructure Engineer

SandboxAQ is a high-growth company delivering AI solutions that address some of the world's greatest challenges. The company’s Large Quantitative Models (LQMs) power advances in life sciences, financial services, navigation, cybersecurity, and other sectors.

We are a global team that is tech-focused and includes experts in AI, chemistry, cybersecurity, physics, mathematics, medicine, engineering, and other specialties. The company emerged from Alphabet Inc. as an independent, growth capital-backed company in 2022, funded by leading investors and supported by a braintrust of industry leaders.

At SandboxAQ, we’ve cultivated an environment that encourages creativity, collaboration, and impact. By investing deeply in our people, we’re building a thriving, global workforce poised to tackle the world's epic challenges. Join us to advance your career in pursuit of an inspiring mission, in a community of like-minded people who value entrepreneurialism, ownership, and transformative impact.

The Cybersecurity Group at SandboxAQ is looking for a founding DevSecOps Engineer to build and embed security into our infrastructure and product lifecycle. You will work closely with a diverse team of cryptographers, developers, ML experts, and physicists to collaborate on delivering novel and secure solutions.

The Cybersecurity Group is looking for a Staff DevSecOps & Infrastructure Engineer to join our team. This role is central to our efforts to: functionalize AQtive Guard, our groundbreaking solution for modern non-human identity and cryptography management.

As the first dedicated security engineer on the team, you will establish the security foundations for products launching globally with major organizations and champion security best practices across our systems. A successful candidate will be comfortable designing, automating, and maintaining secure infrastructure for both on-premise and cloud environments, including local development environments and full CI/CD pipelines.

• Design and implement secure CI/CD pipelines by integrating security testing tools such as SAST, DAST, SCA, and vulnerability scanning.

• Automate security processes and controls throughout the software development lifecycle to ensure high-quality, secure deliverables.

• Build and maintain secure, scalable architecture for AWS and on-premise deployments using Infrastructure as Code (IaC) principles.

• Lead vulnerability management and remediation through security reviews, risk assessments, code audits, and incident response planning.

• Champion a culture of security by mentoring developers on secure coding practices and contributing to FedRAMP compliance efforts.

• US Citizenship and/or security clearance is required due to USG contract requirements.

• Extensive experience with AWS and implementing security controls in cloud-native and large-scale distributed systems.

• Proficiency in container orchestration using Docker and Kubernetes.

• Proven Infrastructure as Code (IaC) expertise using Terraform to define secure infrastructure and manage CI systems.

• Strong scripting skills in languages such as Python or Bash, with hands-on experience integrating security tools into CI/CD pipelines.

• Compliance Frameworks: Experience with FedRAMP, SOC 2, or ISO 27001.

• Security Tooling: Experience with enterprise tools like Crowdstrike, Rapid7, or Snyk.

• Advanced Build & Config: Familiarity with Bazel and configuration management tools like Ansible or Puppet.

• Offensive Security: Experience or certifications such as OSCP.

• Streaming Frameworks: Familiarity with Kafka and Kstreams.

We offer a comprehensive and competitive benefits package designed to support your health, financial well-being, and life outside of work.

• Compensation: Competitive base salary, performance-based incentives or bonuses (where applicable), and equity participation.

• Benefits: Comprehensive medical, dental, and vision coverage for employees and dependents with generous employer premium contributions, retirement savings with company matching, paid parental leave, and inclusive family-building benefits.

• Work-Life Balance: Flexible paid time off, company-wide seasonal breaks, and support for flexible work arrangements that enable sustainable performance.

• Career Development: Opportunities for continuous learning and growth through on-the-job development, cross-functional collaboration, and access to internal learning and development programs.

We are committed to fostering a culture of belonging and respect, where diverse perspectives are actively sought and valued. Our multidisciplinary environment provides ample opportunity for continuous growth - working alongside humble, empowered, and ambitious colleagues ready to tackle epic challenges.

Equal Employment Opportunity: All qualified applicants will receive consideration regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status.

Accommodations: We provide reasonable accommodations for individuals with disabilities in job application procedures for open roles. If you need such an accommodation, please let a member of our Recruiting team know.

Read: Guidance for candidates on using AI Tools in interviews