Raya - DevSecOps Engineer
Requirements
• Strong hands-on experience with AWS and Kubernetes/EKS, comfortable navigating cloud infrastructure and container environments from day one • Kubernetes/EKS, • Solid foundation in security fundamentals: vulnerability management, IAM, network security, and cloud security posture management • security fundamentals: • Experience triaging and remediating security findings from vulnerability scanners or cloud security tools • Familiarity with CI/CD pipelines and integrating security practices into the software development lifecycle • CI/CD pipelines • Strong communication skills, able to work effectively with both DevOps and Security stakeholders and translate technical risk into clear priorities • Experience with Infrastructure-as-Code (e.g., Terraform/OpenTofu), compliance frameworks, or container security tooling • What Sets You Apart • Bridge Builder: You naturally sit at the intersection of DevOps and Security, translating between the two and earning trust from both sides • Bridge Builder: • Impact-driven: You prioritize the fixes and improvements that meaningfully reduce risk, rather than chasing every alert • Impact-driven: • Growth-oriented: You possess a perpetual learner's mindset, staying curious about new threats, tools, and cloud-native security practices • Growth-oriented: • Ownership mentality: You take findings from discovery to resolution without needing to be chased, and you build systems so problems don't recur • Ownership mentality: • Productivity-obsessed: You value tools, workflows, and automation that make security scalable rather than manual • Productivity-obsessed: • Bias toward shipping and iteration: You're able to harden systems incrementally, learn, and refine in short cycles rather than waiting for a "perfect" fix • Bias toward shipping and iteration:
Responsibilities
• Security Ownership: Drive software engineering security hygiene end-to-end, from identifying vulnerabilities and misconfigurations to implementing durable fixes across our platform. This includes AWS, Kubernetes, CDN/WAF, and other technologies used in the PDLC • Security Ownership: • Cross-Functional Collaboration: Work hand-in-hand with DevOps and Engineering teams to embed security best practices into everyday workflows, without slowing down velocity • Cross-Functional Collaboration: • Continuous Learning: Stay current on evolving cloud security threats, tooling, and best practices, ensuring Raya's infrastructure stays ahead of emerging risks • Continuous Learning: • Findings Remediation: Triage, prioritize, and systematically close out security findings, translating scanner output into practical, actionable engineering fixes • Findings Remediation: • Operational Excellence: Expand and maintain security checks and guardrails in CI/CD pipelines and the broader PDLC, so security becomes a natural part of how we ship, not an afterthought • Operational Excellence:
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT