Mid DevSecOps Engineer

📋 Description

• Own technical security controls across GCP and AWS: least-privilege IAM and RBAC, WAF, container
• Drive vulnerability remediation end to end: triage, prioritize, and automate fixes, partnering with
• Build automated scanning and remediation into our pipelines.
• Tune WAF policies and the OWASP Core Rule Set to protect public-facing applications without
• Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and drive remediation
• Contribute to incident response planning and exercises, and ensure backups and recovery processes

🎯 Requirements

• 3+ years in DevSecOps, security engineering, cloud security, or a closely related role
• Hands-on experience securing GCP and/or AWS, including managed Kubernetes (GKE, EKS)
• Container and vulnerability management, including building automated remediation (tools such as
• WAF configuration and OWASP Core Rule Set tuning (Cloud Armor, AWS WAF, Cloudflare, or similar)
• Least-privilege access management across cloud services (IAM, RBAC)
• Working Linux knowledge sufficient to remediate OS and package vulnerabilities in VMs and container

🎁 Benefits

• Remote-first company
• Equity offered
• Recognized by Forbes as one of America's Best Startup Employers
• Built In 2025 and 2026 Best Place to Work
• Equal opportunity employer