DevSecOps Engineer at Typeform

<div class="content-intro"><h3>Who we are</h3> <p>Typeform is a refreshingly different form builder. We help over 150,000 businesses collect the data they need with forms, surveys, and quizzes that people enjoy. Designed to look striking and feel effortless to fill out, Typeform drives 500 million responses every year—and integrates with essential tools like Slack, Zapier, and Hubspot.</p></div><h3><strong>About the Team</strong></h3> <p data-start="375" data-end="500">The <strong data-start="379" data-end="402">Platform &amp; Security</strong> team ensures Typeform engineers can build, deploy, and operate services safely and efficiently.</p> <p data-start="502" data-end="802">As we scale into AI-powered products, our engineering velocity has increased significantly. New workloads—such as model-serving, agent-based systems, and real-time data pipelines—introduce security challenges that our current team does not yet have the bandwidth or AI-specific expertise to manage.</p> <p data-start="804" data-end="1118">You’ll join as a <strong data-start="821" data-end="854">DevSecOps Engineer</strong> to embed security into the development lifecycle, enable high-velocity feature delivery, and ensure that new AI capabilities are safe, compliant, and resilient. This role is an opportunity to make a tangible impact on the security posture of Typeform as we scale.<br><br></p> <h3><strong>Things you will do:</strong></h3> <ul> <li data-section-id="1m6narc" data-start="1144" data-end="1277"><strong data-start="1146" data-end="1178">Embed security into the SDLC</strong>: Partner with engineering and AI teams to ensure features are delivered safely at high velocity.</li> <li data-section-id="1gpwrka" data-start="1278" data-end="1422"><strong data-start="1280" data-end="1311">Develop security automation</strong>: Build and maintain CI/CD security tooling and processes (SAST/DAST, secrets management, artifact scanning).</li> <li data-section-id="1ccsvsl" data-start="1423" data-end="1557"><strong data-start="1425" data-end="1454">Assess and mitigate risks</strong>: Conduct vulnerability assessments, threat modeling, and code reviews for platform and AI workloads.</li> <li data-section-id="1yks6xx" data-start="1558" data-end="1679"><strong data-start="1560" data-end="1586">Advise on architecture</strong>: Recommend secure patterns for infrastructure, agent systems, and model-serving pipelines.</li> <li data-section-id="12mng3b" data-start="1680" data-end="1796"><strong data-start="1682" data-end="1726">Implement monitoring &amp; incident response</strong>: Ensure timely detection and automated response to security alerts.</li> <li data-section-id="10w19jo" data-start="1797" data-end="1917"><strong data-start="1799" data-end="1824">Define best practices</strong>: Create and maintain standards, policies, and reusable security infrastructure components.</li> <li data-section-id="s98nld" data-start="1918" data-end="2070"><strong data-start="1920" data-end="1947">Collaborate effectively</strong>: Influence teams to adopt security practices without slowing development, and act as the internal advocate for security.</li> </ul> <h3><strong>What you already bring to the table:</strong></h3> <ul> <li data-section-id="tuqn6z" data-start="2096" data-end="2186">Several years of experience in <strong data-start="2129" data-end="2183">DevSecOps, security engineering, or cloud security</strong>.</li> <li data-section-id="1faa7pb" data-start="2187" data-end="2289">Strong understanding of <strong data-start="2213" data-end="2286">distributed systems, cloud-native infrastructure, and CI/CD pipelines</strong>.</li> <li data-section-id="12wzfyo" data-start="2290" data-end="2376">Knowledge of <strong data-start="2305" data-end="2373">threat modeling, vulnerability assessment, and incident response</strong>.</li> <li data-section-id="x9nw5t" data-start="2377" data-end="2496">Experience with or strong willingness to learn <strong data-start="2426" data-end="2493">AI/ML security, model-serving pipelines, or agent-based systems</strong>.</li> <li data-section-id="10yya5f" data-start="2497" data-end="2577">Familiarity with <strong data-start="2516" data-end="2556">IaC, Kubernetes, and cloud platforms</strong> (AWS, GCP, Azure).</li> <li data-section-id="h31njw" data-start="2578" data-end="2690">Excellent collaboration and communication skills to explain complex security concepts to non-security teams.</li> </ul> <h3><strong><br>Extra awesome:<br></strong></h3> <ul> <li data-section-id="1req73t" data-start="2714" data-end="2803">Hands-on experience with <strong data-start="2741" data-end="2800">AI security, model risk, or prompt injection mitigation</strong>.</li> <li data-section-id="v9pdwr" data-start="2804" data-end="2865">Experience in <strong data-start="2820" data-end="2862">high-velocity SaaS or PLG environments</strong>.</li> <li data-section-id="cpmm28" data-start="2866" data-end="2934">Contributions to <strong data-start="2885" data-end="2917">open-source security tooling</strong> or frameworks.</li> <li data-section-id="z6cdts" data-start="2935" data-end="3035">Implementing <strong data-start="2950" data-end="2999">automated security testing in CI/CD pipelines</strong> for both code and infrastructure.</li> </ul> <p>&nbsp;</p><div class="content-conclusion"><p>*Typeform drives hundreds of millions of interactions each year, enabling conversational, human-centered experiences across the globe. We <strong>move as one team</strong>, empowering our collective efforts by valuing each individual’s unique perspective. This fosters <strong>strong bonds</strong> grounded in respect, transparency, and trust. We <strong>champion our diverse customer base</strong> by anticipating their needs and addressing their challenges with priority. Committed to excellence, we<strong> hold high expectations </strong>for ourselves and each other, continuously striving to deliver exceptional results.</p> <p>We are proud to be an equal-opportunity employer. We celebrate diversity and stand firmly against discrimination and harassment of any kind—whether based on race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, or veteran status. Everyone is welcome here.</p></div>