DevSecOps Engineer

We are looking for a DevSecOps Engineer based in Latin America to work on a long-term project for one of our clients, one of the 100 fastest-growing tech companies in Los Angeles.

Our client transforms how audit, risk, and compliance professionals manage today’s dynamic risk landscape with a modern, connected platform that engages the front lines, surfaces the risks that matter, and drives better strategic decision-making.

The person in this role will be responsible for vulnerability assessment, triage, reporting, and remediation efforts to help protect and maintain the overall security of the organization. This role will support the development and maintenance of internal security tooling and assessment capabilities, while also contributing to the design and enhancement of cloud and container security baselines. The person in this role will configure and manage cloud security assessment tools, analyze findings, identify meaningful threats, and recommend remediation actions across cloud and containerized environments.

Responsibilities

• Develop, integrate, and maintain internal security systems and CI/CD pipelines, including solutions used to detect, manage, and remediate security vulnerabilities.
• Create detailed reports and documentation for identified vulnerabilities and configuration findings, and regularly present recommendations and insights to team leadership.
• Support remediation efforts for security vulnerabilities across cloud platforms such as AWS and Azure, as well as containerized applications running on Kubernetes.
• Collaborate across teams to design, develop, deploy, and maintain scalable cloud and containerized infrastructure supporting high-performance SaaS applications globally.
• Drive improvements to cloud and container security baselines in alignment with industry security frameworks, standards, and benchmarks.
• Respond promptly to security threats and incidents, independently and collaboratively, to investigate, contain, and resolve issues effectively.
• Support security compliance initiatives and related operational activities as required.

Requirements

• Advanced Level of English.
• 4+ years of experience working in Information Security or related fields.
• Experience with scripting languages such as Python, Bash, and PowerShell, as well as infrastructure automation technologies including Terraform (HCL).
• Strong knowledge of Linux/Unix and Windows operating systems, along with containerization and virtualization technologies such as Docker and Kubernetes.
• Technical understanding of public cloud platforms, particularly AWS and Azure.
• Experience building and securing CI/CD pipelines, including implementing software supply chain security best practices.
• Experience with security assessment tools, including SCA, SAST, DAST, and CSPM solutions such as Qualys, SonarCloud, Prisma, or similar platforms.
• Strong organizational, time management, and attention-to-detail skills.
• Proactive and action-oriented approach to problem-solving and security operations.

Bonus Points

• Bachelor’s Degree in Computer Science, Systems Engineering or related fields.

4tech