Mid DevSecOps Engineer

Job Summary

Hands-on and security-minded, the full-time remote Mid DevSecOps Engineer will embed security into infrastructure, CI/CD pipelines, and cloud environments while ensuring compliance with PCI DSS 4.0 and SOC 2 Type II standards.

Key responsibilities

• Own technical security controls across GCP and AWS, including IAM and RBAC management, WAF, and secure CI/CD
• Drive end-to-end vulnerability remediation, collaborating with the DevOps team for production rollout
• Produce and automate evidence for technical controls, ensuring cloud environments are compliant with security standards

Required qualifications

• 3+ years in DevSecOps, security engineering, or cloud security
• Hands-on experience securing GCP and/or AWS, including managed Kubernetes
• Experience with container and vulnerability management, including automated remediation tools
• Knowledge of WAF configuration and OWASP Core Rule Set tuning
• CI/CD experience with platforms such as GitLab CI, GitHub Actions, or Jenkins