Lead DevSecOps Engineer

Full Remote United States (Must reside in EST or CST Time zone)

Lead DevSecOps Engineer

We’re seeking a Lead DevSecOps Engineer to design, build, and scale secure cloud infrastructure in a fast-paced startup environment. You’ll own the DevSecOps architecture, drive automation initiatives, and embed security best practices and automated code scanning throughout our CI/CD pipelines.

What You’ll Do

• Lead the design and implementation of cloud infrastructure in AWS using Terraform (Infrastructure as Code).
• Build and maintain automated CI/CD pipelines that integrate static code analysis, dependency scanning, container image scanning, and other security checks as part of the deployment process.
• Integrate and manage code scanning and application security tools (e.g., SAST, SCA, DAST) within CI/CD to enforce security gates and “shift-left” security.
• Partner with Engineering and Security teams to ensure system reliability, scalability, and vulnerability management.
• Drive observability initiatives — implement logging, tracing, and alerting across distributed systems.
• Champion DevSecOps best practices and mentor other engineers on cloud security and automation standards.
• Evaluate and integrate new tools to continuously improve deployment and infrastructure workflows.

What We’re Looking For

• 6+ years of DevOps, Cloud, or Software Engineering experience, with at least 2+ years in a Security Engineering
• Deep expertise in AWS services (ECS, EKS, Lambda, CloudFormation, IAM, etc.).
• Proven experience with Terraform for multi-environment infrastructure management.
• Hands-on experience integrating code scanning and security tools into CI/CD pipelines (e.g., SonarQube, Snyk, Checkov, or similar).
• Strong knowledge of containerization and orchestration (Docker, Kubernetes).
• Experience building security and compliance into CI/CD workflows.
• Previous experience working in a startup or high-growth environment — comfortable wearing multiple hats and operating autonomously.
• Excellent communication and collaboration skills.
• Experience with Python or Go

Nice to have

• Experience with security tools (e.g., HashiCorp Vault, AWS Inspector, Twistlock, etc.).
• Exposure to SOC2, ISO27001, or other compliance frameworks.

Why Join Us

• 100% remote-first environment
• Competitive salary with equity opportunities.
• Chance to lead DevSecOps strategy from the ground up and shape engineering culture in a growing startup.
• Collaborative, agile, and inclusive team environment.