Senior DevSecOps Engineer

We're looking for a Senior DevSecOps Engineer to own the company AWS infrastructure and Kubernetes platform with security built in. You'll harden our cloud and clusters, embed security into every stage of delivery, and keep the platform reliable as it scales, working closely with our Python backend, data and AI teams.

• Design, secure and operate AWS infrastructure (EKS/ECS, Lambda, S3, RDS, VPC, IAM).
• Own cloud security: least-privilege IAM, encryption at rest and in transit (KMS), secrets management, network segmentation, and threat detection (GuardDuty, Security Hub, CloudTrail).
• Harden production Kubernetes: RBAC, network policies, pod security standards, admission control and runtime security.
• Manage all infrastructure as code with Terraform, including policy-as-code and security guardrails.
• Build CI/CD pipelines with integrated security: SAST, dependency scanning, container image scanning and signing, secret detection.
• Own monitoring, logging and alerting; lead incident response, including security incidents and post-mortems.
• Run vulnerability management and patching, and remediate audit findings.
• Support data and AI/LLM workloads securely and keep cloud costs in check.

5+ years in DevOps / SRE / platform engineering, with 3+ years running AWS and Kubernetes in production. Hands-on production experience in cloud and infrastructure security (IAM, KMS/secrets, network security, GuardDuty