DevSecOps Engineer - Remote

Overview

Alpaca is a US-headquartered self-clearing broker-dealer and brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Our recent Series D funding round brought our total investment to over $320 million, fueling our ambitious vision.

Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totaling over 9 million brokerage accounts.

Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We’re deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.

Alpaca is proudly backed by top-tier global investors, including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Unbound, SBI Group, Derayah Financial, Elefund, and Y Combinator.

In Short

• We are seeking a DevSecOps Engineer to own the intersection of security, reliability, and DevOps.
• This role will design and implement resiliency across our cloud platform and CI/CD pipelines.
• Embed “security as code” and help lead incident response for high-severity outages.
• Partner with engineering teams to enable safe, fast delivery at scale.
• Hands-on and strategic: automating remediation and hardening deployments.
• Drive measurable reductions in security/infra related incident impact.
• Reports to the CISO, collaborating closely with DevOps, Product, and Engineering leadership.
• The Security Team is 100% distributed and remote.
• Champion a strong security culture within the organization.
• Define key security performance indicators and report improvements to leadership.

Requirements

• 5+ years of experience in DevSecOps, security engineering, or cloud security.
• Strong hands-on experience with CSPs, Kubernetes, Terraform, and container security.
• Deep understanding of secure CI/CD, including IaC security.
• Experience automating vulnerability management and patching workflows.
• Proficient in a scripting/programming language (Python, Go, or similar).
• Comfortable working cross-functionally with DevOps and Engineering teams.
• Excited about Alpaca’s mission and what we’re building.
• Comfortable participating in on-call rotations.

Benefits

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card