Senior DevSecOps Engineer
Core
Own SOC 2, HIPAA, and GDPR infrastructure compliance programs; automate audit evidence collection, remediation workflows, and continuous control monitoring.
Role type
Senior DevSecOps Engineer
Builds
Production cloud, Kubernetes, Terraform, CI/CD, and observability infrastructure
Domain
Cloud infrastructure and security compliance
Required skills
AWS, Kubernetes, Terraform, IAM design, CVE remediation, production software development, audit compliance (SOC 2/HIPAA/GDPR)
Preferred skills
Vanta, SAST/SCA scanners, policy as code, AI governance frameworks, open-source security contributions
Technologies
AWS, Kubernetes, Terraform, CI/CD, observability tools
Responsibilities
Automate audit evidence collection and remediation workflows; Design and maintain IAM and access controls; Identify and remediate CVEs across infrastructure and application code; Build and operate production cloud and observability infrastructure
Seniority
Senior, hands-on IC
