DevSecOps Engineer

🕒 Julho 14

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Overflow

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

⚖️ Jurídico

💳 Fintech

💰 $10.000.000 Series A em 2021-07

Consulting • Legal • Fintech

Estamos em uma missão para inspirar o mundo a doar, ajudando organizações sem fins lucrativos a aceitar doações de ações e criptomoedas com facilidade.

Descrição

• Secure, manage, and scale Overflow’s cloud environment, implementing least-privilege IAM policies, network security (VPCs, WAFs, Security Groups), and robust secret management. • Refine existing infrastructure provisioning using Infrastructure as Code (IaC) tools, ensuring security best practices. • Deploy and manage comprehensive observability, logging, and alerting frameworks to detect performance bottlenecks, anomalous behavior, or potential security incidents. • Own and optimize our continuous integration and deployment (CI/CD) pipelines. • "Shift Left" by integrating automated security testing (SAST, DAST, dependency scanning, container scanning) directly into the developer workflow. • Act as a security champion, partnering with software engineers to perform threat modeling, architectural reviews, and secure coding training. • Action on compliance requirements (SOC 2, PCI-DSS, and data privacy regulations) • Partner with our legal and operations teams to streamline security audits, penetration testing, and vendor risk assessments. • Ensure that PII and sensitive financial data are properly encrypted at rest and in transit across all databases and caching layers.

🎯 Requisitos

• 5+ years in DevOps, Site Reliability, or Cloud Platform roles • Deep, hands-on experience with Docker and AWS ECS Fargate • Extensive experience building and maintaining robust deployment pipelines using GitHub Actions • Practical experience maintaining SOC 2 technical controls and a strong understanding of the architectural requirements for PCI-DSS (ideally Level 1) compliance

🏖️ Benefícios

• Competitive base salary with equity eligibility • Medical, dental, and vision coverage for employees and dependents • Generous paid time off and company holidays • Paid parental leave • 401(k) retirement plan • Dedicated mental health and therapy stipend to support personal well-being • Team retreats and intentional in-person gatherings throughout the year