DevSecOps Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and manage CI/CD pipelines utilizing GitHub Actions and OIDC across various services and repositories.

• Oversee and scale AWS cloud infrastructure, encompassing EC2, S3, SES, ECR, Parameter Store, and IAM.

• Take ownership of containerized deployments using Docker and Docker Compose, including reverse proxy configurations and TLS termination with Caddy.

• Create and sustain infrastructure-as-code for consistent, auditable environment provisioning.

• Enhance observability through logging, metrics, tracing, and alerting for production environments.

• Provide support for PostgreSQL and Redis operations, which includes backups, failover strategies, and performance optimization.

• Manage vulnerability protocols, including scanning, triage, patching schedules, and remediation tracking.

• Design and implement access control measures, secrets management, and least-privilege practices across cloud and CI/CD systems.

• Develop and monitor security detection and alerting mechanisms, including intrusion detection, anomaly detection, and log-based threat monitoring.

• Lead incident response efforts, create runbooks, coordinate actions in response to security incidents, and conduct postmortems.

• Assist with compliance and audit preparedness for a financial services/fintech environment.

• Conduct security assessments of new infrastructure, integrations, and deployment modifications prior to release.

• Advocate for secure-by-default practices, such as dependency management, secrets scanning, and the use of hardened base images.

• Collaborate with engineering teams to minimize deployment friction and enhance release reliability.

• Report directly to the Head of Engineering / CTO.

⛳️ Requirements

• Proven experience in managing both infrastructure/DevOps and security operations responsibilities, or a strong background in one area with substantial expertise in the other.

• Hands-on experience with AWS, including EC2, S3, IAM, ECR, and Parameter Store or similar secrets management solutions.

• Strong expertise in Docker/containerization, including the creation and hardening of Dockerfiles and Compose configurations.

• Experience in CI/CD pipeline design and maintenance using GitHub Actions or comparable solutions, including OIDC-based cloud authentication.

• Knowledge of vulnerability scanning, patch management, and remediation processes.

• Comprehensive understanding of network and application security principles, such as TLS, firewalls, IAM, and least privilege.

• Production experience with PostgreSQL and Redis, covering backups, monitoring, and scaling.

• Proficient in Linux systems administration and shell scripting for automation purposes.

• Incident response experience, including leading during active issues.

• Ability to operate independently in a startup environment with a high level of ownership and minimal supervision.

• Excellent written communication skills for documenting runbooks, postmortems, and security findings.

• Must be based in the U.S.

• Flexibility to work hours that support collaboration across time zones, including those in the U.S.

• Preferred: experience in fintech, trading, or regulated industries.

• Preferred: familiarity with Next.js/React, Python/FastAPI, TypeScript, BullMQ, and Redis.

• Preferred: experience with SIEM tools, SOC workflows, or managed detection and response platforms.

• Preferred: knowledge of SOC 2, PCI DSS, or similar compliance frameworks.

• Preferred: experience with Terraform, Pulumi, CloudFormation, or similar infrastructure-as-code tools.

• Preferred: familiarity with Caddy, nginx, Traefik, or similar reverse proxies and TLS automation.

• Preferred: experience with Claude Code or similar AI-assisted development workflows.

🏝️ Benefits

• Performance bonuses.

• Comprehensive benefits package.

• Competitive base salary.

• High ownership from the outset.

• Direct impact on architectural and tooling decisions.

• High-performance culture that values ownership, curiosity, and results.

• Opportunity to work with a professional-grade futures trading firm at a crucial stage of growth.

• Small team structure.

• Access to a global trader community and a fast-paced trading platform.