DevSecOps Engineer

Disqo•Los Angeles, CA

2d•Hybrid

About The Position

DISQO is a leading provider of advertising intelligence, measuring brand and performance outcomes across every media channel to power data-driven marketing decisions. Trusted by 500+ of the world’s largest brands and 150+ agency and media partners, and recognized by Inc., Deloitte, Ad Age, Digiday, Forbes, and Cynopsis, DISQO is redefining the power of measurement in advertising. Joining DISQO Nation means being part of a team that moves fast, thinks boldly, and is passionate about solving meaningful problems. At DISQO, our day-to-day roles are deeply integrated with AI. We actively empower every team member with cutting-edge AI tools to automate repetitive tasks and streamline workflows, allowing you to focus your energy on high-impact, strategic, and creative problem-solving. Innovation isn't just something we talk about, it's how we operate. We challenge assumptions, embrace new ideas, and continuously push ourselves to build better solutions for our customers and each other. Our values guide how we work and win together. We believe in winning as one team , fostering a culture of collaboration, trust, and shared accountability. We pursue outsized impact by focusing on opportunities that drive meaningful results for our customers and our business. We champion the customer by putting their needs at the center of every decision and delivering solutions that create real value. And we are relentlessly all in , bringing energy, passion, and commitment to every challenge, every day. If you're energized by high-growth environments, motivated by AI-enabled productivity, and excited by the opportunity to do impactful work alongside talented, driven teammates, you'll feel right at home at DISQO. About the role: You'll work at the intersection of Site Reliability Engineering and Cloud Security, keeping our platform highly available, scalable and secure by design. We treat infrastructure as software and believe security should enable engineering velocity, not block it. You'll ship most infrastructure, automation and remediation work with AI coding agents. Your core job is to design the guardrails, reviews and tests that make that safe at scale, and to help build the internal agents that run a growing part of our reliability and security operations. The skill we value most is judgment: knowing when an agent's output is wrong, unsafe or not ready for production, and building systems that catch it when you're not looking.

Requirements

5+ years of hands-on experience in Site Reliability Engineering (SRE), DevOps, Cloud Engineering, or Cloud Security Engineering roles.
Strong production expertise with AWS core services, networking, multi-account governance, and AWS-native security tooling (IAM, GuardDuty, Security Hub, KMS).
Advanced hands-on proficiency with Terraform, GitOps, and configuration management.
In-depth knowledge of Docker and Kubernetes (EKS) administration, deployment, and container runtime security.
Proven ability to write clean, modular automation code in Python or Go (not just configuring tools, but authoring custom automations, tooling, and integrations).
Solid experience building, maintaining, and securing CI/CD pipelines (GitLab CI, ArgoCD, ArgoWorflows).
Active, daily experience leveraging AI coding agents and development tools (Claude Code, Cursor, Copilot) to accelerate delivery and automate workflows.
Strong collaboration, clear communication, and a philosophy that security empowers development velocity rather than acting as a blocker.

Nice To Haves

AWS Certified DevOps Engineer, AWS Certified Security - Specialty, CKA/CKS (Certified Kubernetes Administrator/Security Specialist), or CISSP.
Familiarity with endpoint security (CrowdStrike), modern SIEM/SOAR platforms, and vulnerability management workflows.
Familiarity with SOC 2 Type I/II, ISO 27001, GDPR, and CCPA compliance requirements in cloud environments.

Responsibilities

Build and run secure, multi-account AWS infrastructure with Terraform and GitOps.
Operate and harden Amazon EKS workloads and the container platform.
Define, track and enforce SLOs, SLIs and error budgets across our microservices, including services that depend on LLMs (fallbacks, latency and cost budgets).
Run and improve our observability stack on Grafana, Newrelic.
Write automation in Python or Go. Agents do much of the authoring; you own the design, testing and review.
Be the go-to partner for engineering teams on infrastructure, deployments and environments. Help them debug build, pipeline and runtime issues, and turn recurring requests into self-service.
Help teams provision and change infrastructure through reviewed Terraform and GitOps workflows, and support new services from first deploy to production readiness.
Maintain and improve build and deployment pipelines, release processes and environment management so teams can ship quickly and safely.
Own IAM, KMS, Secrets Manager, GuardDuty, Security Hub, AWS Config, CloudTrail and Control Tower across our accounts.
Enforce least privilege and short-lived credentials for people, services and AI agents alike.
Design secure network boundaries, egress filtering and WAF rules that limit blast radius.
Embed SAST, SCA, container scanning and policy-as-code (OPA) into GitLab CI and ArgoCD without slowing teams down.
Scale scanning, triage and code review to match the growing volume of AI-generated code.
Partner with product teams in design reviews so new services follow secure architecture patterns.
Build detections mapped to MITRE ATT&CK and respond to both reliability outages and security incidents as part of the on-call rotation.
Build and operate agents, MCP servers and skills that automate SRE and security workflows.
Treat agents as non-human identities with scoped permissions, approval gates for high-risk actions (such as production changes and IAM edits) and full audit trails.
Vet and pin third-party models, MCP servers and agent plugins the same way we manage open-source dependencies.
Control what consumer and panel data can reach external model APIs, and set usage and cost limits.
Write runbooks, alerts and blameless postmortems as structured, testable steps an agent can execute, with clear stop conditions.
Test and evaluate agents before they reach production, and monitor them once they do.