Malwarebytes

Malwarebytes

Principal DevOps Engineer

Remote (United States) · Principal

Sponsorship not specified$125k-$145kDetected 26 days ago
PythonGoBashCode ReviewGitAWSCloud PlatformsDockerTerraformCI/CDGitHub ActionsJenkinsLinuxDevOpsSite Reliability EngineeringCybersecuritySupply ChainLeadershipCommunicationMentoring

About the role

  • Our product has since grown and evolved, from removing malware, to protecting devices, to ever-changing prevention.
  • Malwarebytes began after our founder, Marcin Kleczynski, accidentally infected his parents' computer while downloading a video game as a teenager.
  • Since then, the digital threat landscape has only grown more complex.

Responsibilities

  • Own and evolve our AWS cloud infrastructure using Terraform, applying security best practices - least-privilege IAM, network segmentation, secrets management, and compliance guardrails - as non-negotiable defaults.
  • Design, implement, and continuously improve CI/CD pipelines using GitHub Actions, ensuring automated security scanning (SAST, secrets detection, container image scanning), policy enforcement, and quality gates are built into every pipeline.
  • Champion infrastructure security: proactively identify and remediate cloud misconfigurations, leverage GuardDuty, Security Hub, and Config, and partner with the Security team on vulnerability management and incident response.
  • Own and improve SRE practices: define SLOs, build alerting and observability solutions using CloudWatch and related tooling, and drive blameless post-mortems.
  • Participate in on-call rotation and own production incidents end-to-end - from detection through resolution and follow-up.
  • Maintain build and release environments for development teams and develop automation and test tooling for client applications.
  • Interface with executive leadership to communicate platform strategy, risk, and investment tradeoffs; lead and drive cross-functional infrastructure projects from scoping through delivery.
  • Strong GitHub Actions experience building pipelines as code, including integrated security scanning (SAST, secrets detection, and container image scanning).
  • Proven SRE practice experience: SLO definition, observability design, and post-mortem-driven reliability improvement.

Requirements

  • Familiarity with cross-platform code compilation (Windows and macOS), code signing, and software supply chain security.
  • An ideal candidate holds one or more AWS Professional-level certifications (Solutions Architect Professional, DevOps Professional, or equivalent).
  • Demonstrable cloud security depth: hands-on experience with GuardDuty, Security Hub, Config, SCPs, and related tools and practices.

Nice to have

  • you write modular, reusable, well-tested infrastructure code and treat IaC security as seriously as application security.
  • Jenkins experience is a plus.
  • hands-on experience with GuardDuty, Security Hub, Config, SCPs, and related tools and practices.
  • Strong scripting and automation - Python, Go, or Bash - with a track record of eliminating manual toil.
  • Solid Linux system administration and container management (Docker).
  • Windows Server and Windows container experience is a plus.
  • BA/BS in Engineering or Computer Science preferred
  • equivalent experience demonstrated through a proven track record accepted.

Skills

  • cutting through the noise, stopping threats others miss, and delivering peace of mind in an unpredictable digital world.
  • Malwarebytes is looking for..
  • Evaluate and adopt emerging DevOps technologies through structured proof-of-concept testing.
  • Keep documentation, runbooks, and architecture diagrams current and actionable.
  • BA/BS in Engineering or Computer Science preferred; equivalent experience demonstrated through a proven track record accepted.

Compensation

  • $125k-$145k

Company info

  • to create protection that works when people need it most.
  • Attackers are faster, stealthier, and more sophisticated, while traditional solutions often overwhelm people with complicated tools and settings.
  • At Malwarebytes, we believe protection should be both powerful and refreshingly simple because if security feels too hard to use, people will not use it.
  • Discrimination is Illega l Family and Medical Leave Act (FMLA) This is to affirm our policy of providing equal employment opportunities to all employees and applicants for employment in accordance with all applicable laws and regulations.
  • Our company will not discriminate against or harass any employee or applicant for employment because of race, color, creed, religion, national origin, sex, sexual orientation, gender identity, disability, age, marital status, familial status, membership or activity in a local human rights commission, or status regarding public assistance.
  • We will ensure that all our employment practices are free of discrimination.
  • Such employment practices include, but are not limited to, the following:
  • hiring, upgrading, demotion, transfer, recruitment or recruitment advertising, selection, layoff, disciplinary action, termination, rates of pay or other forms of compensation, and selection for training, including apprenticeship.
  • We will provide reasonable accommodation to applicants and employees with disabilities whenever possible.
  • Active, daily use of AI coding assistants (Claude Code, GitHub Copilot, or equivalent) is expected as a core part of this role - you treat these tools as a force multiplier and stay current with how AI is reshaping DevOps and SRE workflows.
  • Here at Malwarebytes, we believe that when you're free from threats, you're free to thrive.
  • In that moment in time a product was born for all people, with a mission to rid the world of malware.
Apply directly at Malwarebytes →Create a free account for alerts like thisView Malwarebytes immigration profile

This listing is sourced directly from Malwarebytes's careers page and normalized into a canonical job model.