DevSecOps Engineer

Description

The company is a software business within the company, a parent group that acquires and keeps software companies for the long term, honoring founder legacies and sharing AI expertise and operating discipline.

Founded in 2016, the parent runs more than 120 companies across the Americas, Europe and APAC, and has appeared on the Inc. 5000 six years in a row. Its foundation is endowed with $100 million in parent stock and uses technology for greener, fairer outcomes.

The team builds cloud-based numbering software, founded in 2013 in Littleton, Colorado, that helps telecom carriers, MVNOs and CPaaS providers order, port and manage phone numbers.

Customers are in the U.S. and Canada and depend on the platform every day. The team joined the parent group in September 2026.

Responsibilities

• Split your time roughly evenly, with about half on security and the rest on platform engineering.
• You will own major parts of the AWS and Kubernetes platform and lead day-to-day security and compliance work.
• The scope is wide and the ownership is real, and you will directly shape how the team builds and releases software.
• Build, run and improve the EKS infrastructure on AWS.
• Lead and carry out migrations of workloads onto EKS.
• Improve CI/CD pipelines and build security checks into them.
• Automate repeat manual work, and script any task you do twice.
• Run the SOC 2 program in Vanta, tracking controls, closing gaps and keeping the company ready for audit.
• Own vulnerability management: triage container CVEs from ECR scans and SAST/DAST results, then fix them or send them to the owning team through GitHub.
• Watch for and act on AWS security alerts from GuardDuty and Security Hub, along with issues reported from outside the company.
• Administer internal access control and write and maintain policies for secure development and data handling.
• Take part in design reviews and threat modeling with engineering.
• Organize penetration tests, run tabletop exercises and help build security awareness across the company.

Requirements

• 2+ years in DevOps, platform, SRE or security engineering.
• Hands-on production experience with Kubernetes, preferred.
• Working knowledge of AWS, including IAM, networking and core services.
• Experience planning and carrying out infrastructure migrations.
• Scripting in Python, Bash or similar, and comfort with Git-based workflows.
• Able to work independently, set priorities and solve problems without a set guide.
• Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays.
• Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a comparable compliance platform.
• Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail and SCPs.
• Infrastructure as code experience with Terraform, CDK or similar.
• Experience with SAST/DAST tools or GitHub Advanced Security.
• Relevant certifications such as CKA or AWS Security Specialty.

Conditions

Expected base salary is $80,000 to $120,000 USD, depending on factors such as market conditions, location, and job-related skills and experience.

AI tools may help screen applicants, but people make all hiring decisions, and you can contact the company about the process or to request accommodation.

Only trust recruiters who write from an address on the company's own domain, never pay for equipment or share banking details during hiring, and forward suspicious messages to the careers inbox or the platform where you received them.

Benefits

• Fully company-paid medical coverage for employees.
• 401(k) with up to 4% company match.
• Company-paid life and disability coverage.
• $1,200 annual wellness benefit.
• Flexible time off, paid holidays and a paid winter break.
• Monthly internet stipend.