DevSecOps Engineer
Posted Updated
Description
Requirements:
- Deep, hands-on AWS experience including EKS, Kubernetes, and Docker with strong Terraform and CI/CD practices (GitHub Actions, Jenkins, or GitLab CI); Azure or GCP exposure is a plus.
- Proven ability to design infrastructure architecture for security, scale, and resilience.
- Production experience operating on-premises or hybrid infrastructure under data residency constraints.
- Experience securing platforms that handle sensitive financial or transactional data.
- Practical implementation of SOC 2 and/or ISO 27001 controls in a live production environment.
- Strong grounding in application and container security: SAST, DAST, dependency scanning, secrets management, Kubernetes security, and vulnerability remediation against severity-based SLAs.
- Sound judgment on security enforcement versus delivery velocity, and the ability to work autonomously in a fast-paced startup environment. Security certifications (AWS Security Speciality, CKS, OSCP, or CISSP) are a plus.
