Principal DevOps Engineer
Free to start · No card · 5 credits the moment you sign up
Job description
Here at Malwarebytes, we believe that when you’re free from threats, you’re free to thrive. It all started in 2008 with one person who needed help with a malware infection, and a community coming together to find solutions. In that moment in time a product was born for all people, with a mission to rid the world of malware. Our product has since grown and evolved, from removing malware, to protecting devices, to ever-changing prevention.
About Malwarebytes Inc.
Malwarebytes began after our founder, Marcin Kleczynski, accidentally infected his parents’ computer while downloading a video game as a teenager. At the time, there was no product that could fully solve the problem, so he set out to build one. That early experience shaped our mission: to create protection that works when people need it most.
Since then, the digital threat landscape has only grown more complex. Attackers are faster, stealthier, and more sophisticated, while traditional solutions often overwhelm people with complicated tools and settings. At Malwarebytes, we believe protection should be both powerful and refreshingly simple because if security feels too hard to use, people will not use it. That is why our aspiration is always to stay one step ahead: cutting through the noise, stopping threats others miss, and delivering peace of mind in an unpredictable digital world.
Malwarebytes is looking for..
We are looking for a sharp, security-minded Principal DevOps Engineer to join our Consumer team. You will architect and manage our AWS infrastructure using Terraform, enforce cloud security best practices at every layer, make cost-conscious infrastructure decisions that balance performance with efficiency, and drive modern CI/CD automation across the organization. You will own site reliability for our production systems and set the engineering standards that the team builds against. In addition to deep technical execution, you will provide leadership and mentorship to the engineering team, interface with executive leadership on platform strategy and investment, and lead cross-functional infrastructure projects. If you hold security and reliability to a high standard, default to automation over manual process, and can operate credibly at every level of the organization, we want to hear from you.
What You Will Do:
- Own and evolve our AWS cloud infrastructure using Terraform, applying security best practices — least-privilege IAM, network segmentation, secrets management, and compliance guardrails — as non-negotiable defaults.
- Design, implement, and continuously improve CI/CD pipelines using GitHub Actions, ensuring automated security scanning (SAST, secrets detection, container image scanning), policy enforcement, and quality gates are built into every pipeline.
- Champion infrastructure security: proactively identify and remediate cloud misconfigurations, leverage GuardDuty, Security Hub, and Config, and partner with the Security team on vulnerability management and incident response.
- Own and improve SRE practices: define SLOs, build alerting and observability solutions using CloudWatch and related tooling, and drive blameless post-mortems.
- Participate in on-call rotation and own production incidents end-to-end — from detection through resolution and follow-up.
- Maintain build and release environments for development teams and develop automation and test tooling for client applications.
- Evaluate and adopt emerging DevOps technologies through structured proof-of-concept testing.
- Keep documentation, runbooks, and architecture diagrams current and actionable.
- Provide technical leadership, mentorship, and strategic guidance to the engineering team; conduct architecture and code reviews and define team engineering standards.
- Interface with executive leadership to communicate platform strategy, risk, and investment tradeoffs; lead and drive cross-functional infrastructure projects from scoping through delivery.
- 10+ years of hands-on DevOps or SRE experience, with at least 5 years operating production workloads in AWS at scale — EC2, ECS, ECR, Lambda, RDS, CloudWatch, IAM, VPC, EKS, and CloudFront required.
- BA/BS in Engineering or Computer Science preferred; equivalent experience demonstrated through a proven track record accepted. An ideal candidate holds one or more AWS Professional-level certifications (Solutions Architect Professional, DevOps Professional, or equivalent).
- Deep Terraform expertise: you write modular, reusable, well-tested infrastructure code and treat IaC security as seriously as application security.
- Strong GitHub Actions experience building pipelines as code, including integrated security scanning (SAST, secrets detection, and container image scanning). Jenkins experience is a plus.
- Demonstrable cloud security depth: hands-on experience with GuardDuty, Security Hub, Config, SCPs, and related tools and practices.
- Strong scripting and automation — Python, Go, or Bash — with a track record of eliminating manual toil.
- Solid Linux system administration and container management (Docker). Windows Server and Windows container experience is a plus.
- Proven SRE practice experience: SLO definition, observability design, and post-mortem-driven reliability improvement.
- Familiarity with cross-platform code compilation (Windows and macOS), code signing, and software supply chain security.
- Active, daily use of AI coding assistants (Claude Code, GitHub Copilot, or equivalent) is expected as a core part of this role — you treat these tools as a force multiplier and stay current with how AI is reshaping DevOps and SRE workflows.
- Strong communication and documentation skills: capable of writing architecture proposals, leading design reviews, and producing runbooks that on-call engineers can act on under pressure.
- Demonstrated ability to operate at a principal or staff engineer level — influencing architecture across teams, driving technical decisions through ambiguity, and raising engineering quality across the organization.
- Proven experience providing technical leadership and mentorship to engineering teams and interfacing with executive leadership on platform strategy, risk, and infrastructure investment decisions.
- Comprehensive medical, dental, and vision insurance coverage
- Employee Referral Bonus Program
- Wellness programs
- An opportunity to do something great for yourself and the world!
Skills You'll Need to Have:
Perks & Benefits:
(Benefits and Perks subject to change by country/region)
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for Malwarebytes. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.