DevSecOps Engineer

Job Summary

Seeking a skilled and hands-on DevSecOps Engineer, the full-time remote position will manage security engineering for an AWS-hosted SaaS platform, focusing on hardening infrastructure, managing vulnerability programs, and embedding security practices into the software development lifecycle.

Key responsibilities

• Own security monitoring and incident response, including triaging alerts and investigating security incidents
• Design and maintain security controls across the AWS environment, ensuring compliance with standards such as HIPAA and SOC 2 Type II
• Support the vulnerability management lifecycle by integrating security tooling into CI/CD pipelines and tracking remediation efforts

Required qualifications

• 4+ years of experience in information security engineering or cloud security
• Practical expertise in AWS security, including IAM, KMS, and VPC security
• Experience operating a vulnerability management program and responding to security incidents
• Familiarity with HIPAA, SOC 2, and HITRUST compliance requirements
• Proficiency in scripting languages such as Python or Bash for automation tasks