Job Closed
This listing is no longer active.
Senior DevSecOps – Platform Security Engineer, AWS, Kubernetes
Location
United States
Posted
112 days ago
Salary
$175K - $215K / year
Seniority
Senior
Job Description
Senior DevSecOps – Platform Security Engineer, AWS, Kubernetes
Defcon AI
• Design, build, and maintain CI/CD security controls that scale across repositories and teams (reusable pipeline components, templates, and standards). • Implement Kubernetes security architecture and guardrails (RBAC hardening, workload security baselines, admission policies, network policies, and safe multi-tenant patterns as applicable). • Improve container security end-to-end: base-image strategy, vulnerability scanning, registry controls, image signing, and promotion workflows. • Operationalize vulnerability management with risk-based prioritization, measurable remediation SLAs, and dashboards/metrics (MTTR, exposure trends, top recurring root causes). • Drive developer enablement: clear documentation, lightweight design reviews/threat modeling for high-impact changes, office hours, and high-signal guidance embedded in tooling. • This role builds and runs production security systems. • You'll ship code and infrastructure, not just recommendations • You'll own reliability and outcomes for the controls you build. • You'll respond to incidents and on-call rotation related to platform security controls and pipeline reliability (scope aligned with Platform/SRE).
Job Requirements
- 5+ years of experience in DevOps/SRE/Platform Engineering and/or Security Engineering with a strong automation and delivery focus.
- Hands-on experience securing AWS environments: IAM (least privilege), network controls, encryption (KMS), and centralized logging/detection.
- Strong Kubernetes security experience (EKS or equivalent): RBAC, workload hardening, and policy enforcement via admission control.
- Experience integrating security into CI/CD pipelines and developer workflows (SAST, SCA, secrets scanning, container scanning, IaC scanning).
- Infrastructure as Code proficiency (Terraform, CloudFormation, CDK, or Pulumi) and ability to embed guardrails into IaC workflows.
- Proficiency scripting/coding (e.g., Python, Go, Bash) to build integrations, automations, and internal tooling.
- Able to communicate risk and tradeoffs clearly and pragmatically to engineers; improves signal-to-noise rather than adding friction.
Benefits
- A fully remote, results-based environment
- Competitive salary, bonus, and equity package
- 100% employer paid, comprehensive health insurance including medical, dental, and vision for you and your family
- Unlimited PTO, with your manager’s approval
- Flexible work environment where you manage your work day
- 14 weeks of fully-paid parental leave
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
Senior DevSecOps, Platform Security Engineer – AWS, Kubernetes
Red Cell PartnersRed Cell Partners, founded in 2020, is a dynamic and rapidly growing firm specializing in launching and scaling innovative companies across various industries. With a focus on deli
• Build and operate production security controls across our AWS and Kubernetes platform. • Design and implement guardrails that make secure delivery the default—covering CI/CD security automation, software supply chain controls, and Kubernetes policy enforcement. • Co-own AWS security guardrails with Platform/SRE (IAM patterns, logging and detection, network and encryption baselines). • Partner with Security/GRC on control interpretation and evidence needs; implements controls in engineering systems and pipelines. • Maintain CI/CD security controls that scale across repositories and teams (reusable pipeline components, templates, and standards). • Improve container security end-to-end: base-image strategy, vulnerability scanning, registry controls, image signing, and promotion workflows.
DevOps Intern
SuccessKPIAll-in-one revolutionary insight and action platform that uses AI, analytics, and automation to remove CX obstacles.
• Assist in maintaining and enhancing CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, or similar). • Support the automation of infrastructure provisioning using tools like Terraform, Ansible, or CloudFormation. • Monitor and troubleshoot applications, services, and system performance. • Work with AWS cloud platform to deploy and manage resources. • Learn and contribute to containerization and orchestration (Docker, Kubernetes). • Collaborate with developers to ensure smooth deployment and release processes. • Document processes, tools, and runbooks for knowledge sharing.
Senior DevOps Engineer
OloOlo is a privately-held company that has built a platform that provides digital ordering and delivery enablement solutions for multi-unit restaurants with 40 or more locations. As
• Lead large, complex infrastructure projects to delivery, including research/proposal, planning and testing phases. • Own EKS/EC2 lifecycle: provisioning, upgrades, add‑ons (CNI/CSI/Ingress), autoscaling/capacity, reliability, and cost controls. • Define CI/CD and GitOps standards (TeamCity/Octopus and GitHub Actions + Argo CD or Flux); design .NET container pipelines. • Standardize IaC with Terraform and use Crossplane where Kubernetes‑managed cloud resources make sense. • Build and maintain platform tooling, environments, and scripts; enable self‑service patterns for product teams. • Partner with the other Platform Engineering teams, Security, and the broader Olo ENG Group on incident response, runbooks, and sustainable operational practices. • Automate security/compliance workflows (patching, evidence capture for SOC 2/PCI, remediation) without slowing delivery. • Mentor engineers, document and socialize platform standards, and drive adoption across teams.
• Implementar e manter práticas de monitoramento e alerta proativo dos sistemas • Desenvolver e manter soluções de automação para provisionamento e configuração de infraestrutura • Participar ativamente na resolução de problemas e incidentes de produção • Colaborar com equipes de desenvolvimento para garantir a escalabilidade e confiabilidade de aplicações • Realizar análises de desempenho e capacidade dos sistemas
