Responsibilities

• Design and maintain secure cloud infrastructure (AWS preferred).
• Build and improve security monitoring, alerting, and incident response capabilities.
• Manage and support ISO 27001, SOC 2, and other compliance initiatives.
• Lead security audits, certifications, and client security assessments/questionnaires.
• Drive remediation of security vulnerabilities and static code analysis findings.
• Oversee penetration testing and track remediation efforts.
• Implement security best practices across CI/CD pipelines and development workflows.

Requirements

• 4+ years of experience in DevOps, Security Engineering, DevSecOps, or related roles.
• Strong hands-on experience with AWS and cloud security.
• Experience with CI/CD, Infrastructure-as-Code (Terraform/CloudFormation), and security automation.
• Familiarity with ISO 27001, SOC 2, security a...