Staff Security Engineer, DevSecOps (Corporate Security)

AgileBits Inc.

Job Overview

Location

Remote (United States | Canada)

Job Type

Full-time

Full Job Description

📋 Description

• As a Staff Security Engineer in DevSecOps, you will found and lead the DevSecOps function within Corporate Security, shaping how developer security works at 1Password by setting technical vision, driving standards and controls, and building a scalable program that secures systems, tools, and processes powering how the company works.
• Day to day, you will own GitHub and CI/CD security, harden the software supply chain, define security for AI-assisted development, build secure templates and guardrails engineering teams actually use, partner with Platform Engineering, mentor engineers, and support Corporate Security operations including on-call rotations and investigations.
• You will join a passionate Security Team at 1Password, a company building the foundation for a safe, productive digital future with over 180,000 businesses trusting its Unified Access Management platform, where security is foundational to unleashing employee productivity without compromise.
• In this role, you will have real ownership to set the technical direction for developer security, elevate the team through mentorship and documentation, drive organization-wide standards without direct authority, and make architectural decisions that prevent entire classes of future security problems while scaling impact across engineering teams.

🎯 Requirements

• Minimum of 8 years of combined experience in security engineering, DevSecOps, platform security, or closely related engineering roles, with deep focus on securing developer environments, CI/CD, or software supply chains.
• Deep, hands-on expertise in GitHub Enterprise security and governance, including branch protections, secret scanning, access controls, repository standards, Actions security, and audit logging at scale.
• Proven ability to design and implement security controls that integrate into CI/CD pipelines without meaningfully degrading developer velocity, with experience in GitHub Actions and familiarity with scaling pipeline security across large engineering organizations.
• Solid understanding of software supply chain security within developer environments, including dependency hygiene (npm, pip, and similar), token and secret management, secure package consumption practices, and SBOM generation.
• Practical experience solving security challenges introduced by AI-assisted and agentic development, including governing AI coding tools in production environments and defining policy and technical controls for tools like Copilot, Cursor, or Claude Code.
• Strong scripting and automation skills in Python, Bash, Terraform, or similar, with demonstrated ability to build tooling that scales security controls without proportional manual effort.

🏖️ Benefits

• Competitive health benefits including health, dental, and for US roles 401k or for Canada roles RRSP, plus immediate participation in 1Password's benefits program.
• Generous paid time off policy, maternity and parental leave top-up programs, and paid volunteer days.
• RSU program for most employees, retirement matching program, free 1Password account, and peer-to-peer recognition through Bonusly.
• Remote-first work environment with flexibility to work from home country within the US or Canada, and opportunity to participate in annual department-wide offsites and team meetings.
• Equity grant and, where applicable, participation in incentive programs, plus commitment to fair market value and internal equity in compensation.

Skills & Technologies

Python

Terraform

GitHub

Senior

Remote

Ready to Apply?

Apply Externally

You will be redirected to an external site to apply.

AgileBits Inc.

Visit Website

About AgileBits Inc.

AgileBits Inc. develops 1Password, a cross-platform password manager that securely stores credentials, secrets, and documents for individuals, families, and enterprises. The Toronto-based company provides browser extensions, desktop and mobile apps, and a command-line tool to generate, fill, and audit passwords while enforcing zero-knowledge encryption. Features include shared vaults, SSH key management, sign-in with SSO, advanced reporting, and developer integrations. The product supports Windows, macOS, Linux, iOS, Android, and ChromeOS, and offers hosted or self-hosted deployment. AgileBits serves millions of users and thousands of organizations worldwide, emphasizing privacy, compliance, and ease of use.

View Company Profile

Get more remote jobs like this

Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.

Weekly remote jobs and featured talent.

No spam. Only curated remote roles and product updates. You can unsubscribe anytime.