How to Apply to Devo

9 min read Last updated April 20, 2026 2 open positions
Blake Crosley
Blake Crosley Researched using publicly available information, hiring data, and ATS analysis.

Key Takeaways

  • Devo's official careers portal is devo.com/careers/open-positions; applications are processed through Jobvite (careersite slug 'devo').
  • Roles split roughly along geography: Madrid is engineering and product, Cambridge MA is sales, customer success, and executive, with smaller teams in London, Singapore, and Dubai.
  • The product competes with Splunk, Microsoft Sentinel, Elastic Security, Datadog Cloud SIEM, Securonix, and Exabeam — naming these incumbents in your story matters.
  • Be candid about the 2024 layoff round (~10%) and the ongoing AI/SOC pivot anchored by DevoGenAI; the company expects candidates to engage with the reality, not avoid it.
  • Submit a clean, single-column PDF resume that mirrors job-description keywords so Jobvite's parser and recruiter search surface your application.
  • Spanish-language ability is genuinely valuable for Madrid roles even when the posting is in English; ENS-certified public-sector experience is a meaningful differentiator.
  • Expect a virtual loop of three to five interviews mixing technical depth, cross-functional collaboration, and a leadership conversation, with reference checks before offer.

About Devo

Devo Technology is a cloud-native security data analytics company best known for its enterprise SIEM (Security Information and Event Management) platform. Founded in Madrid in 2011 as Logtrust by Pedro Castillo and a team of Spanish data engineers, the company rebranded to Devo in 2018 and established a dual headquarters in Cambridge, Massachusetts to serve the lucrative North American security market while keeping deep engineering roots in Spain. Today Devo employs roughly 700 people across offices in Madrid (Manoteras), Cambridge MA, London, Singapore, and Dubai, and competes head-to-head with Splunk (now part of Cisco), Datadog Cloud SIEM, Elastic Security, Microsoft Sentinel, Securonix, and Exabeam in the next-generation SOC tooling market. The product is positioned as a high-performance, multi-tenant security data lake with real-time streaming analytics, an architecture that lets large enterprises and MSSPs ingest and retain telemetry at petabyte scale without the cost overhang typical of legacy SIEMs. Devo has raised more than $400M in total venture funding to date, including a roughly $200M Series F in 2022 led by Eurazeo with continued participation from Insight Partners and Bessemer Venture Partners, valuing the company at approximately $1.5B at the time, though press reporting in 2024 suggested the private market valuation had compressed alongside the broader cybersecurity downturn that swept through Splunk, SentinelOne, and many late-stage security vendors. In 2024 the company conducted a workforce reduction of around 10% as part of that sector-wide consolidation, and CEO Marc van Zadelhoff — who arrived from leadership roles at IBM Security and Cisco AppDynamics — has publicly steered the roadmap toward AI-native SOC operations, including the launch of DevoGenAI in the fourth quarter of 2024. IPO speculation has persisted into 2025 and 2026 but no S-1 filing has been made public, and candidates should treat the IPO timeline as genuinely uncertain rather than imminent. For candidates evaluating Devo, three cultural facts matter the most: first, Madrid remains the engineering and product center of gravity, with strong Spanish-speaking engineering teams operating in English as the corporate language; second, Cambridge MA is sales, customer success, marketing, and executive heavy, with a faster, more commercial cadence; third, the company holds Spanish ENS (Esquema Nacional de Seguridad) certification, which gives it a meaningful edge with EU public sector and regulated industries that legacy US-only SIEMs cannot easily match. Together those facts shape both the kinds of problems engineers solve and the kinds of customers commercial teams sell to.

Application Process

  1. 1
    Browse open roles at devo

    Browse open roles at devo.com/careers/open-positions, which embeds the Jobvite-hosted job board (careersite slug 'devo'); the same listings also appear on jobs.jobvite.com/devo and are syndicated to LinkedIn.

  2. 2
    Submit your application directly through the Jobvite form attached to each posti

    Submit your application directly through the Jobvite form attached to each posting; expect to upload a resume (PDF preferred), provide work-authorization details for the relevant country, and answer a short set of role-specific screening questions.

  3. 3
    If your background matches, a Talent Acquisition partner (often based in Madrid

    If your background matches, a Talent Acquisition partner (often based in Madrid for EMEA roles or Cambridge for US roles) will reach out within one to three weeks for a 30-minute introductory call covering motivation, compensation expectations, and right-to-work.

  4. 4
    Technical and individual contributor roles typically include a hiring-manager in

    Technical and individual contributor roles typically include a hiring-manager interview focused on domain depth, followed by a take-home exercise or live technical screen (coding, system design, security analysis, or product case depending on function).

  5. 5
    Expect a virtual on-site loop of three to five interviews on Zoom or Google Meet

    Expect a virtual on-site loop of three to five interviews on Zoom or Google Meet, mixing peer engineers, cross-functional partners (product, engineering, sales engineering), and a values or culture-add conversation.

  6. 6
    Senior, leadership, and executive candidates will also meet with a VP-level or C

    Senior, leadership, and executive candidates will also meet with a VP-level or C-level stakeholder; for Madrid-based engineering hires, expect at least one panel conducted partially in Spanish, even if the role is English-primary.

  7. 7
    Final stages include reference checks (typically two to three professional refer

    Final stages include reference checks (typically two to three professional references), a background check appropriate to the country of hire, and an offer call from the recruiter walking through base, bonus or commission, equity, and benefits.

  8. 8
    Onboarding runs roughly two to four weeks and includes mandatory security traini

    Onboarding runs roughly two to four weeks and includes mandatory security training, product enablement on the Devo platform, and an introduction to the SOC and data-lake architecture that underpins the company's competitive positioning.

Resume Tips for Devo

recommended

Lead with measurable security or data outcomes, not platform name-drops: 'reduce

Lead with measurable security or data outcomes, not platform name-drops: 'reduced mean time to detect by 38% across 4PB of telemetry' beats 'used Splunk and Elastic.'

recommended

Name the SIEM, EDR, SOAR, and cloud-security tools you have actually operated (S

Name the SIEM, EDR, SOAR, and cloud-security tools you have actually operated (Splunk, Sentinel, Chronicle, CrowdStrike, SentinelOne, Palo Alto Cortex, Sumo Logic), so the recruiter can map your experience to Devo's competitive landscape.

recommended

For engineering roles, call out streaming and big-data stack experience explicit

For engineering roles, call out streaming and big-data stack experience explicitly — Kafka, Flink, ClickHouse, Cassandra, Elasticsearch, columnar storage, query optimizers — because Devo's core differentiator is its purpose-built data engine.

recommended

If you have worked in or with a Security Operations Center, quantify shifts cove

If you have worked in or with a Security Operations Center, quantify shifts covered, alert volume triaged, playbooks authored, or detection content developed; SOC realism is a major hiring signal.

recommended

List language proficiency honestly with CEFR levels for Spanish and English; Mad

List language proficiency honestly with CEFR levels for Spanish and English; Madrid roles often want B2-plus Spanish even when the job ad is in English, while US roles weight English fluency more heavily.

recommended

Highlight regulated-industry exposure (financial services, public sector, health

Highlight regulated-industry exposure (financial services, public sector, healthcare, MSSP) since Devo's pipeline skews to large regulated buyers and ENS-driven EU public sector deals.

recommended

For sales, customer success, and sales engineering, surface ARR retired, retenti

For sales, customer success, and sales engineering, surface ARR retired, retention rates, expansion bookings, and named logos in the cybersecurity, MSSP, or telco verticals where Devo has its strongest references.

recommended

Keep formatting simple and ATS-clean: single-column layout, standard section hea

Keep formatting simple and ATS-clean: single-column layout, standard section headers, no images or text boxes, and a PDF saved with selectable text — Jobvite parses cleanly when the resume avoids fancy templates.

ATS System: Jobvite

Devo Technology runs its hiring on Jobvite, embedded as a 'jv-careersite' iframe on devo.com/careers/open-positions and also reachable directly through Jobvite's hosted board. Jobvite is a mid-market applicant tracking system widely used in tech and is generally forgiving of standard resume formats, but it relies on text extraction so anything graphical or table-based will be silently dropped from the parsed candidate profile.

  • Submit through the official Jobvite form on devo.com — third-party aggregator submissions sometimes fail to attach the resume cleanly to your candidate profile.
  • Use a single-column resume in PDF format with selectable text, standard fonts (Arial, Calibri, Inter, Helvetica), and traditional section headers like 'Experience,' 'Education,' and 'Skills' so Jobvite's parser populates fields correctly.
  • Mirror the exact tools, frameworks, and certifications listed in the job description (for example Kafka, ClickHouse, MITRE ATT&CK, CISSP, OSCP) because Jobvite's keyword search is what recruiters use to filter applicants.
  • Provide a working email address and a phone number with country code; Jobvite uses email as the primary candidate identifier and de-duplicates aggressively.
  • Skip cover letters unless the posting asks for one — Jobvite recruiters rarely open them, and the screening questions on the application capture what the cover letter would say.
  • If you reapply to Devo after a previous rejection, use the same email so your prior history is preserved; recruiters can see and re-engage past candidates.

Interview Culture

Devo's interview culture reflects its hybrid identity: technically demanding in the way you would expect from a Madrid engineering shop, and commercially polished in the way you would expect from a Boston-area cybersecurity vendor competing against Splunk and Microsoft. Engineers describe loops that go deep on data structures, distributed systems trade-offs, and the realities of operating a streaming analytics platform at petabyte scale; security analysts and detection engineers should expect MITRE ATT&CK-mapped scenario questions and live triage exercises against simulated alert streams. Sales, sales engineering, and customer success candidates are interviewed against the standard SIEM playbook — discovery, technical proof, displacement of incumbents, executive sponsorship, and total cost of ownership math — and should be prepared to discuss specific Splunk or Microsoft Sentinel competitive deals they have personally worked. The cultural tone in Madrid is warm, direct, and consensus-oriented, with a strong sense of pride in the homegrown engineering of the platform and the founder lineage that traces back to Logtrust; in Cambridge it is faster, more transactional, and more closely tied to quarterly commercial cadence and pipeline reviews. Both sides put weight on intellectual honesty: candidates who admit what they do not know consistently outperform those who oversell or hide gaps. The 2024 layoffs and the ongoing CEO and board recalibration are widely discussed on Glassdoor and in industry trade press, so it is fair and expected for candidates to ask directly about runway, IPO timing, the AI roadmap, the post-DevoGenAI product strategy, and how the leadership team measures progress against larger competitors. Thoughtful, specific questions about roadmap, team structure, on-call expectations, and cross-office collaboration land well; generic enthusiasm and rehearsed answers do not.

What Devo Looks For

  • Deep operational experience with a SIEM, security data lake, or large-scale observability platform — not just classroom familiarity with security concepts.
  • Comfort with the multi-tenant, streaming, columnar architecture that defines Devo's product, and the engineering humility to debug across that stack rather than blame an adjacent team.
  • Bilingual or trilingual candidates (Spanish + English at minimum) for Madrid-based roles, with willingness to operate in English as the corporate working language.
  • Customer empathy: candidates who can articulate the day-to-day reality of a SOC analyst or detection engineer, because that is the persona Devo ultimately serves.
  • A pragmatic posture toward AI in security operations — informed enthusiasm about DevoGenAI and LLM-assisted SOC workflows, paired with realism about hallucination, prompt injection, and false-positive risk.
  • Track record competing in a crowded SIEM market: experience displacing Splunk, Sentinel, QRadar, or Sumo Logic is a major asset in commercial roles.
  • Willingness to work across three to five time zones; the dual-HQ structure means productive async written communication is a job requirement, not a bonus.
  • Resilience and clarity about why you are joining a private, late-stage cybersecurity company in a sector still working through post-2024 consolidation.

Frequently Asked Questions

What ATS does Devo Technology use?
Devo runs its hiring on Jobvite. The careers page at devo.com/careers/open-positions embeds a Jobvite 'jv-careersite' iframe with the careersite slug 'devo,' and applications are submitted directly through the Jobvite-hosted form. The same listings are also reachable through the Jobvite-hosted board at jobs.jobvite.com/devo and are syndicated to LinkedIn and other major job aggregators, but the cleanest path is always the form on devo.com itself.
Where are Devo's main offices and which roles are based where?
Devo operates a dual headquarters in Madrid (Manoteras) and Cambridge, Massachusetts, with additional offices in London, Singapore, and Dubai. Madrid concentrates engineering, data, product, and a meaningful share of EMEA customer success; Cambridge concentrates North American go-to-market, marketing, customer success leadership, finance, and most executive functions. London anchors UK and Northern Europe sales, while Singapore and Dubai support APAC and Middle East coverage respectively.
Is Devo still hiring after the 2024 layoffs?
Yes. Devo conducted a workforce reduction of roughly 10% in 2024 as part of broader cybersecurity sector consolidation that also affected Splunk, SentinelOne, and several other late-stage security vendors, but it has continued to recruit in priority areas including AI for security operations (DevoGenAI), sales and sales engineering, customer success, and core platform engineering in Madrid. Active openings are always listed on the Jobvite-powered careers page, which is the authoritative source for what is genuinely open.
Do I need to speak Spanish to work at Devo?
English is the corporate working language across all geographies, so non-Spanish speakers can absolutely work at Devo, and many engineers and individual contributors in Madrid operate primarily in English. That said, for Madrid-based engineering and people-leader roles, conversational Spanish (CEFR B2 or above) is genuinely useful for day-to-day team life, hallway conversations, and management of Spanish-speaking teammates, and it is often preferred even when not strictly required by the job description.
What does Devo's product actually do, and who does it compete with?
Devo sells a cloud-native SIEM and security data analytics platform built on a high-performance, multi-tenant streaming data engine that lets large enterprises and managed security service providers ingest, retain, and analyze security telemetry at petabyte scale with much lower cost overhead than legacy tools. Its main competitors are Splunk (now Cisco), Microsoft Sentinel, Elastic Security, Datadog Cloud SIEM, Securonix, Exabeam, and to a lesser extent Sumo Logic, Chronicle (Google SecOps), and IBM QRadar.
Is Devo planning to IPO?
IPO speculation has surrounded Devo since the 2022 Series F at a roughly $1.5B valuation led by Eurazeo, and trade press reports in 2025 and 2026 have referenced ongoing exploration of public-market readiness. As of April 2026 no S-1 has been made public, and candidates should treat the IPO timeline as genuinely uncertain rather than imminent. It is reasonable to ask the hiring manager and recruiter about the company's stated public-market posture during the interview process.
How long does the Devo hiring process typically take?
Most candidates report a four-to-eight-week process from application to offer. The recruiter screen usually happens within one to three weeks of applying, followed by a hiring-manager interview, a technical exercise or case study tailored to the function, and a virtual loop of three to five interviews on Zoom or Google Meet covering peer collaborators, cross-functional partners, and a values or culture-add conversation. Senior, leadership, and executive roles often take longer because of additional stakeholder meetings, reference checks, and the involvement of VP- or C-level interviewers.
What technical skills matter most for engineering roles at Devo?
Devo's platform leans on streaming data infrastructure, columnar storage, query engines, and large-scale distributed systems, so experience with technologies like Kafka, Flink, ClickHouse, Cassandra, Elasticsearch, and Java or Scala back-end development is highly relevant. For security-adjacent engineering roles, familiarity with MITRE ATT&CK, detection engineering, threat hunting, SOC tooling, and integrations with EDR or cloud-security platforms (CrowdStrike, SentinelOne, Microsoft Defender, AWS, Azure, Google Cloud) is a strong signal.
How should I talk about DevoGenAI in an interview?
Show that you have actually thought about LLM-assisted SOC workflows — what they automate well (alert summarization, natural-language query generation, triage assistance, runbook drafting) and where they fail (hallucinated findings, prompt injection, over-trust by analysts, audit and compliance challenges in regulated industries). Devo expects informed enthusiasm grounded in real understanding of both the upside and the risks, not generic AI optimism or a refusal to engage.
What benefits and compensation should I expect at Devo?
Compensation varies materially by geography and role, but Devo generally offers a competitive base salary, a target bonus or commission for commercial roles, equity in the form of stock options, private health insurance (especially in Spain and the US), flexible or hybrid work arrangements, paid time off in line with local norms, and standard local benefits like meal vouchers in Spain or 401(k) matching in the US. Specific numbers should be confirmed with the recruiter, since bands shift by location, level, and function.

Open Positions

Devo currently has 2 open positions.

Check Your Resume Before Applying → View 2 open positions at Devo

Related Resources

Similar Companies

Related Articles

Sources

  1. Devo Careers — Open Positions —
  2. Devo Careers Landing Page —
  3. Jobvite Hosted Job Board — Devo —
  4. Devo Technology — Company Overview —
  5. Devo Announces DevoGenAI for the SOC —
  6. Devo Series F Funding Announcement (2022) —
  7. Devo Marc van Zadelhoff CEO Appointment —
  8. Esquema Nacional de Seguridad (ENS) — Spanish National Security Framework —