Senior Software Engineer | DevSecOps

About Boomi And What Makes Us Special

Are you ready to work at a fast-growing company where you can make a difference? Boomi aims to make the world a better place by connecting everyone to everything, anywhere. Our award-winning, intelligent integration and automation platform helps organizations power the future of business. At Boomi, you’ll work with world-class people and industry-leading technology. We hire trailblazers with an entrepreneurial spirit who can solve challenging problems, make a real impact, and want to be part of building something big. If this sounds like a good fit for you, check out boomi.com or visit our Boomi Careers page to learn more.

Role And Responsibilities

• Lead efforts to identify and remediate cloud misconfigurations at scale using CSPM tools (e.g., Stacklet).
• Drive automation initiatives for encryption key rotation, secrets management, and policy enforcement.
• Partner with engineering teams to design and enforce AWS IAM governance and privilege management strategies.
• Integrate and optimize security scanning (SAST, DAST, IaC, OSS) across CI/CD pipelines (GitLab, Jenkins).
• Facilitate and contribute to threat modeling sessions, ensuring outputs translate into actionable mitigations.
• Define and enforce container and Kubernetes security baselines, including runtime policies and admission controls.
• Strengthen observability by designing and operationalizing security log ingestion and monitoring in SumoLogic.
• Mentor junior engineers and security champions, fostering a culture of shared security responsibility.
• Collaborate with cross-functional stakeholders to align remediation priorities with risk-based frameworks.
• Contribute to the development of security playbooks, standards, and best practices that scale across teams.
  
  

Technical Must-Know Concepts

• Cloud Security: Deep knowledge of AWS/Azure IAM, KMS, Key Vaults, CSPM tools.
• CI/CD Security: Advanced experience integrating SAST/DAST/IaC scanning into pipelines.
• Secrets & Key Management: Automation of key rotation, secret vaulting, and governance.
• Vulnerability Management: Hands-on with tools like Snyk, TruffleHog, and prioritization strategies.
• Compliance & Governance: Familiarity with NIST, ISO 27001, SOC2, and aligning engineering controls.
• Container & Kubernetes Security: Policy enforcement (OPA, Kyverno), runtime security, and hardening.
• DevSecOps Strategy: Ability to think beyond tooling—designing scalable, automated frameworks and influencing roadmap decisions.
  
  

Be Bold. Be You. Be Boomi. We take pride in our culture and core values and are committed to being a place where everyone can be their true, authentic self. Our team members are our most valuable resources, and we look for and encourage diversity in backgrounds, thoughts, life experiences, knowledge, and capabilities.

All employment decisions are based on business needs, job requirements, and individual qualifications.

Boomi strives to create an inclusive and accessible environment for candidates and employees. If you need accommodation during the application or interview process, please submit a request to talent@boomi.com. This inbox is strictly for accommodations, please do not send resumes or general inquiries.