Mid Dev Sec Ops Engineer

🔥 58 minutes ago

🇲🇽 Mexico – Remote

💵 MX$75k - MX$85k / month

⏰ Full Time

🟡 Mid-level

🟠 Senior

⚙️ Operations

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peek

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2012

🏨 Hospitality

🍽️ Food & Beverage

📦 Logistics

💰 $80M Series C on 2021-11

Hospitality • Food & Beverage • Logistics

Peek is a company that specializes in offering a wide range of experiences and activities for travelers and adventure seekers. Their platform allows users to discover and book various tours and activities such as snorkeling, ATV rides, kayak rentals, art experiences, food tours, and more across numerous global destinations like the Cayman Islands, Sint Maarten, San Diego, and many others. Peek also provides 'Peek Pro,' a service tailored for businesses to manage bookings. The company emphasizes user-friendly interfaces to filter by top-rated activities and provides detailed booking information to enhance the travel experience for over 25 million customers.

📋 Description

• Own technical security controls across GCP and AWS, including least-privilege IAM and RBAC, WAF, container and image security, and secure CI/CD • Drive vulnerability remediation end to end by triaging, prioritizing, and automating fixes • Partner with the DevOps team on production rollout of remediation • Build automated scanning and remediation into pipelines • Tune WAF policies and the OWASP Core Rule Set for public-facing applications • Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and remediate findings • Contribute to incident response planning and exercises • Ensure backups and recovery processes meet encryption, access, and integrity requirements • Produce and automate evidence for technical controls • Keep cloud environments connected to Drata • Serve as technical expert for audits, customer security reviews, and vendor assessments involving sensitive data

🎯 Requirements

• 3+ years in DevSecOps, security engineering, cloud security, or a closely related role • Hands-on experience securing GCP and/or AWS, including managed Kubernetes (GKE, EKS) • Container and vulnerability management, including building automated remediation • Experience with tools such as Trivy, AWS Inspector, Amazon ECR scanning, GCP Artifact Analysis, and ZAP • WAF configuration and OWASP Core Rule Set tuning • Least-privilege access management across cloud services using IAM and RBAC • Working Linux knowledge sufficient to remediate OS and package vulnerabilities in VMs and container images • Scripting in Python, Bash, or similar • CI/CD experience with GitLab CI, GitHub Actions, Jenkins, Codefresh, or similar • Experience working in a PCI DSS or SOC 2 environment, including producing evidence for technical controls • Clear written communication with technical and non-technical audiences • Mexican work authorization • Nice to have: low-downtime patching approaches, PCI ASV scanning, Drata or similar compliance automation, serverless platforms, cloud security posture tools, third-party risk reviews involving PII, agentic or AI-assisted penetration testing, and certifications such as OSCP, CISSP, CISM, or AWS/GCP Security Specialty

🏖️ Benefits

• Equity • Remote work • Flexible schedule support for occasional work outside normal business hours • Equal-opportunity employment • Disability assistance during the application process