Who We Are:
Bandwidth
, a prior “Best of EC” award winner, is a global software company that helps enterprises deliver exceptional experiences through voice, messaging, and emergency services. Reaching 65+ countries and over 90 percent of the global economy, we’re the only provider offering an owned communications cloud that delivers advanced automation, AI integrations, global reach, and premium human support. Bandwidth is trusted for mission‑critical communications by the Global 2000, hyperscalers, and SaaS builders!
At Bandwidth, your music matters when you are part of the BAND. We celebrate differences and encourage BANDmates to be their authentic selves. #jointheband
What We Are Looking For :
The Senior Dev Sec Ops Engineer delivers advanced technical expertise to integrate security, automation, and observability across Bandwidth’s software development and infrastructure environments.
This role focuses on executing secure‑by‑default practices and embedding protection, compliance, and telemetry into CI/CD and cloud operations, enabling faster, more resilient, and more secure delivery pipelines.
Working closely with Security Operations (Sec Ops), Application Security (App Sec), Governance Risk and Compliance (GRC), Cloud, and Engineering teams, this engineer applies “shift‑left” principles to ensure security is built in at every stage of development and deployment.
What You’ll Do:Security tooling integration and automation
Implement, maintain, and optimize security tooling across build, test, and deploy stages (SAST, DAST, SCA, IaC scanning, supply‑chain scanning, CSPM, CWPP, SIEM, SOAR, EDR/XDR).Build and maintain automated security testing and compliance validation in CI/CD pipelines (Git Hub Actions, Git Lab CI, Jenkins, ArgoCD, Azure Dev Ops).Develop and support reusable automation frameworks and APIs for vulnerability data exchange, control testing, and alerting.Use Infrastructure‑as‑Code (IaC) and Policy‑as‑Code (PaC) technologies (Terraform, Cloud Formation, OPA, Conftest) to continuously enforce governance and compliance controls.Collaborate with the Application Security team on code scanning, vulnerability triage, and secure code‑review automation.Observability, telemetry, and detection engineering
Integrate and maintain unified observability solutions, consolidating metrics, traces, and logs across Open Telemetry, Prometheus, Data Dog, AWS Cloud Watch, and Sumo Logic.Develop and enforce security and performance observability standards for services and environments.Collaborate with the Sec Ops team to link security telemetry with detection rules, correlation logic, and automated response systems.Support metrics collection and dashboards to assess observability coverage and detection performance.Cloud and infrastructure security
Implement secure configurations and controls across AWS, Azure, and GCP environments using CSPM, CWPP, Zero Trust, and workload‑protection tools.Embed visibility and control baselines into multi‑cloud and containerized environments.Contribute to automation for compliance and configuration validation using CIS, NIST, and FedRAMP benchmarks.Partner with Cloud and Infrastructure teams to ensure cloud security posture meets enterprise standards.Metrics, reporting, and improvement
Collect and report Dev Sec Ops metrics related to vulnerability reduction, automation coverage, observability, and compliance.Identify opportunities to improve tool integrations, automation pipelines, and detection methods.Research and pilot emerging technologies, including AI/ML‑based threat detection, runtime protection, and automated remediation tools.AI Security
Support the implementation of Bandwidth’s AI Security Framework to uphold the security, privacy, and ethical use of AI systems.Collaborate with Security and Product teams on threat modeling and validation for AI/ML systems, addressing model integrity, prompt injection, data leakage, and bias mitigation.Contribute to internal automations for AI model testing, ensuring adherence to information security controls.Developer Enablement & Collaboration
Support Security Champion initiatives to promote secure coding awareness, tooling…
