DevSecOps Engineer

Banyan Software•Denver, CO

10d•Hybrid

About The Position

10x People is seeking a DevSecOps Engineer to build and secure its cloud infrastructure. The role has ownership of key parts of the AWS and Kubernetes platform and leads day-to-day security and compliance work, with roughly half of the time focused on security. The engineer will help shape how the company operates and have a direct impact on how it builds and ships software. The position involves building, operating, and improving Kubernetes infrastructure on AWS, leading workload migrations to EKS, improving CI/CD pipelines with integrated security checks, and automating manual processes. Security responsibilities include running the SOC 2 program in Vanta, managing vulnerabilities, monitoring and responding to AWS security alerts and external reports, maintaining access controls and security policies, participating in design reviews and threat modeling, coordinating penetration tests, running tabletop exercises, and supporting security awareness. The candidate must be based in or able to commute to Littleton, Colorado, and attend the office on Tuesdays.

Requirements

At least 2 years of experience in DevOps, platform, SRE, or security engineering.
Solid working knowledge of AWS, including IAM, networking, and core services.
Experience planning and executing infrastructure migrations.
Proficiency in scripting with Python, Bash, or a similar language.
Experience with Git-based workflows.
Ability to work independently, prioritize effectively, and solve problems without a playbook.
Based in or able to commute to Littleton, Colorado, and able to attend the office on Tuesdays.

Nice To Haves

Hands-on production experience with Kubernetes.
Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
Infrastructure as code experience with Terraform, CDK, or similar tools.
Experience with SAST/DAST tools or GitHub Advanced Security.
Relevant certifications such as CKA or AWS Security Specialty.

Responsibilities

Build, operate, and improve Kubernetes (EKS) infrastructure on AWS.
Lead and execute workload migrations onto EKS.
Maintain and improve CI/CD pipelines, integrating security checks into them.
Automate recurring manual processes.
Run the SOC 2 program in Vanta by tracking controls, closing gaps, and maintaining audit readiness.
Own vulnerability management, including triaging container CVEs from ECR scans and SAST/DAST findings, remediating issues or routing them to the appropriate team through GitHub.
Monitor and respond to AWS security alerts from GuardDuty and Security Hub, as well as externally reported issues.
Manage internal access control and maintain policies for secure development and data handling.
Participate in engineering design reviews and threat modeling sessions.
Coordinate penetration tests and run tabletop exercises.
Help maintain security awareness across the organization.