DevSecOps Engineer

Description

The company is an early-stage team building a multi-tenant SaaS platform for transportation operations in the $800B US freight industry.

Freight companies run loads, drivers, carriers, payments and financial records on the platform, and customers expect that data to be protected like any other business-critical system.

You will help protect the platform and its customer data by closing cloud security gaps, building security checks into the release process, running penetration testing, and setting up the infrastructure for internal security, IT and AI tools.

The role is hands-on infrastructure work that also requires coordinating with DevOps, engineering, IT & Security and outside security vendors.

Security is a shared responsibility across the company.

Responsibilities

• Design and deliver infrastructure changes that tighten cloud security, including network isolation and identity-based access.
• Make those changes in infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners on the applications that depend on them.
• Build secure defaults into infrastructure modules so new resources are compliant from the start.
• Help run the vulnerability management program and drive fixes within defined SLAs.
• Tune and improve the automation that processes security findings.
• Extend existing security scanning with AI-assisted testing, such as automated security code review and AI-driven penetration testing.
• Manage third-party penetration tests end to end: scoping, test environments and accounts, vendor coordination, findings intake and retesting.
• Help turn the internal AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs.
• Deploy and run internal applications in Azure with identity, secrets, networking and backups configured correctly from day one.
• Build telemetry pipelines from OpenTelemetry into Azure Monitor for AI and internal tools, with dashboards and alerts for anomalous activity.
• Plan and prioritize work with DevOps, engineering and IT & Security.
• Write clear runbooks and documentation, and produce evidence for the SOC 2 program.
• Tech stack: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID); Terraform; GitHub Actions and Azure DevOps pipelines; Docker, Kubernetes, Azure Container Registry; Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana; Aikido, Cloudflare; Cursor, Claude, Claude Platform (managed agents), Grokbot;.NET/C, TypeScript, Angular, React.

Requirements

• Fluent in English, spoken and written.
• 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering or security engineering.
• Hands-on experience with at least one major cloud provider (Azure, AWS or GCP), covering networking, identity and access management, and secrets management.
• Production experience with infrastructure as code, preferably Terraform.
• Experience building and maintaining CI/CD pipelines.
• Working knowledge of containers and Kubernetes.
• Scripting skills in Python, PowerShell or Bash.
• Understanding of common cloud and web application security risks and how to fix them.
• Ability to explain technical risk clearly to both engineers and non-engineers.
• Optional: experience with Azure specifically, including private endpoints, VNet integration and Entra ID managed identities.
• Optional: experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing.
• Optional: experience coordinating penetration tests or working with external security firms.
• Optional: experience with OpenTelemetry, Azure Monitor or similar observability tools, including writing alert queries (KQL is a plus).
• Optional: familiarity with SOC 2, ISO 27001 or CIS Benchmarks.
• Optional: interest in AI tooling and how to deploy and monitor it safely.
• Optional: security certifications such as AZ-500, Security+ or similar are a plus.
• Optional: background in logistics or transportation is a bonus.

Conditions

Equal opportunity applies; the company does not discriminate on protected characteristics.