DevSecOps Engineer
Core
Build, operate, and secure AWS and Kubernetes infrastructure while leading SOC 2 compliance and vulnerability management for a cloud-based numbering platform.
Role type
DevSecOps Engineer
Builds
Kubernetes (EKS) infrastructure, CI/CD pipelines, and security compliance programs
Domain
Cloud Infrastructure (AWS) and Security Compliance
Deliverable
infrastructure
Required skills
Kubernetes, AWS, CI/CD, Python, Bash, Git, Vulnerability Management, SOC 2 compliance, Threat Modeling
Preferred skills
Terraform, CDK, SAST/DAST tools, AWS Security Services (GuardDuty, Security Hub), CKA, AWS Security Specialty
Technologies
AWS, Kubernetes, EKS, Vanta, GitHub, GuardDuty, Security Hub
Responsibilities
Build and operate Kubernetes on AWS; Lead workload migrations to EKS; Maintain CI/CD pipelines with security checks; Run SOC 2 program in Vanta; Manage vulnerability management and triage CVEs; Monitor and respond to AWS security alerts; Manage access control and security policies; Participate in design reviews and threat modeling; Coordinate penetration tests and security awareness training
Seniority
Mid-level, hands-on IC