About the role
Responsibilities:
- Security posture of our AWS environment (ECS, Lambda, EC2 IAM, and VPC) hardening, least-privilege IAM, and network segmentation.
- AWS infrastructure automation using Terraform, Pulumi, or similar, with policy-as-code and drift detection.
- End-to-end vulnerability management: AWS Inspector triage, CVE remediation across Linux fleets, patching cadence.
- Continuous SOC 2 audit readiness evidence automation, control monitoring, and auditor engagement.
- CI/CD security: GitHub Actions hardening, secrets/OIDC, SCA, SAST/DAST, supply-chain controls.
- Leading large customer deployments, especially on-prem, hybrid and air-gapped environments.
- Especially working with infosec and infrastructure teams and guiding them with Oloid product line deployments.
- Provide technical leadership to other DevOps and infrastructure teams.
- Incident response runbooks, container security, and secure design reviews with product. engineering
Requirements:
- 6+ years in DevOps/SRE/infrastructure engineering, 3+ with a security focus.
- Deep hands-on AWS expertise and strong IaC experience (Terraform/Pulumi + OPA, Checkov, or similar).
- Vulnerability management at scale (Inspector, Qualys, Tenable) and Linux patching experience.
- CI/CD security experience (GitHub Actions preferred) and scripting fluency (Python, Bash).
- SOC 2 Type II or ISO 27001 audit support experience.
- Container security: Docker, ECS/Kubernetes, image scanning, runtime controls.
- Preferred: prior cybersecurity experience (security engineering, SecOps, or pentesting), endpoint/Windows agent security, PKI knowledge, observability tooling (Grafana, Prometheus, OpenTelemetry).
- The ideal candidate combines strong technical depth with the ability to communicate effectively, being equally comfortable presenting to auditors, advising product teams, and executing hands-on remediation while maintaining a high security bar without slowing delivery.