DevSecOps Engineer

DevSecOps Engineer – Data Platform & Security (REMOTE)

We're looking for a DevSecOps Engineer to join a small, high-visibility team focused primarily on building out a new security remediation practice, with a lighter, secondary role supporting an in-flight reporting platform migration. This is a hands-on infrastructure and security tooling role focused on system health rather than new feature development — implementing infrastructure-level security fixes as directed by internal security team, standing up and operating vulnerability scanning and remediation tooling, and keeping cloud infrastructure up to date. Success depends on someone comfortable moving between focused infrastructure and security tooling work and close coordination with a Technical Program Manager and a Software Developer on a shared backlog. This role sits within a core team of three: a Technical Program Manager, who provides day-to-day delivery leadership, a Software Developer, and this position, who together own a shared system health backlog weighted toward the security remediation workstream.

Key Responsibilities

• Implement infrastructure-level security measures and remediations across applications as directed by internal security team.
• Stand up, configure, and maintain security scanning and vulnerability management tooling across the platform — for example, dependency/software composition analysis (e.g., npm audit or similar), a vulnerability management platform (e.g., Nucleus), and dynamic application security testing (DAST); specific toolset to be finalized.
• Patch, harden, and update underlying infrastructure, hosts, and cloud configurations tied to security findings.
• Partner with the Software Developer to coordinate application-level and infrastructure-level fixes, and with the Technical Program Manager to keep related stories well-scoped and ready for sprint.
• Evaluate and pilot AI-assisted tooling to speed up vulnerability triage, remediation guidance, or security monitoring where it can meaningfully reduce manual effort.
• Monitor infrastructure and pipelines for new vulnerabilities using existing and newly adopted security tooling.

• Provide infrastructure support as needed for the migration of reporting to the new target data platform, in coordination with the Software Developer and Technical Program Manager.

• Keep cloud infrastructure, CI/CD tooling, and platform components up to date across services.
• Identify and remediate infrastructure-related technical debt across the platform.
• Maintain monitoring, alerting, and observability tooling to support ongoing system health.
• Participate in Agile ceremonies (standups, sprint planning, retrospectives) with the broader team, with a personal backlog focused primarily on security and secondarily on system health and tech debt stories.
• Keep story status, comments, and acceptance criteria current in Jira so the Technical Program Manager can maintain an accurate delivery plan.

Qualifications

• 3–6 years of DevSecOps, infrastructure, or platform engineering experience.
• Deep, hands-on experience with AWS services, including RDS, DynamoDB, API Gateway, Lambda, S3, IAM, and VPC.
• Experience implementing security remediations and operating related tooling — for example, dependency/vulnerability scanning (npm audit or similar), vulnerability management platforms (e.g., Nucleus), and DAST tools.
• Experience building and maintaining CI/CD pipelines using GitHub Actions, AWS CodePipeline, or similar tools.
• Experience with infrastructure as code (e.g., Terraform, CloudFormation, or AWS CDK).
• Comfort working from a clearly defined, prioritized backlog — picking up scoped stories, updating status, and flagging blockers.
• Experience with monitoring and observability tooling such as Datadog or AWS CloudWatch.
• Familiarity with SQL databases.
• Strong communication and interpersonal skill, with comfort coordinating closely with a Technical Program Manager and Software Developer.
• Ability to work both independently and as part of a small, tightly coordinated team.

Nice to Have

• Hands-on experience with dependency/software composition scanning, vulnerability management platforms (e.g., Nucleus), or DAST tooling in a production environment.
• Interest or hands-on experience evaluating AI-assisted security or DevOps tooling — e.g., AI-assisted vulnerability triage, code scanning, or remediation suggestions.
• Exposure to broader security vulnerability management, such as CVE triage, or experience working with enterprise security teams.
• Familiarity with data platform or reporting migrations (e.g., Splunk, Snowflake, Sigma, or similar tools).
• Experience with containerization and orchestration (e.g., Docker, ECS, Kubernetes).
• Scripting experience (e.g., Python, Bash, Node) for automation and tooling.
• Experience working on a cross-functional Agile Scrum team.

Engagement Details

• Team composition: 1 Technical Program Manager, 1 Software Engineer, 1 DevOps Engineer (this role) (working within a broader delivery team).
• Primary tools: Jira and Confluence (day-to-day use required), plus AWS, GitHub, and security/vulnerability scanning tooling (specific toolset TBD).
• Location and reporting structure: Remote; reports to the Technical Program Manager on this engagement

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, and paid holidays annually – as applicable.