DevSecOps Engineer

Banyan Software•Denver, CO

5d•$80,000 - $120,000

About The Position

10x People is seeking a DevSecOps Engineer to build and secure its cloud infrastructure. The role owns key parts of the AWS and Kubernetes platform and leads day-to-day security and compliance work, with approximately half of the position focused on security. The engineer will help shape how the company operates and how it builds and ships software. The position includes building, operating, and improving Kubernetes infrastructure on AWS; leading workload migrations to EKS; maintaining CI/CD pipelines with integrated security checks; and automating recurring work. Security responsibilities include running the SOC 2 program in Vanta, managing vulnerabilities and security alerts, maintaining access controls and security policies, participating in design reviews and threat modeling, coordinating penetration tests, conducting tabletop exercises, and supporting security awareness.

Requirements

At least 2 years of experience in DevOps, platform, SRE, or security engineering.
Solid working knowledge of AWS, including IAM, networking, and core services.
Experience planning and executing infrastructure migrations.
Proficiency in scripting languages such as Python or Bash, or similar.
Experience with Git-based workflows.
Ability to work independently, prioritize effectively, and solve problems without an established playbook.
Based in or able to commute to Littleton, Colorado, with in-office attendance on Tuesdays.

Nice To Haves

Hands-on production experience with Kubernetes.
Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
Infrastructure as code experience with Terraform, CDK, or similar.
Experience with SAST/DAST tools or GitHub Advanced Security.
Relevant certifications such as CKA or AWS Security Specialty.

Responsibilities

Build, operate, and improve Kubernetes (EKS) infrastructure on AWS.
Lead and execute workload migrations to EKS.
Maintain and improve CI/CD pipelines, integrating security checks.
Automate recurring manual work through scripting.
Run the SOC 2 program in Vanta by tracking controls, closing gaps, and maintaining audit readiness.
Own vulnerability management, including triaging container CVEs from ECR scans and SAST/DAST findings, resolving issues or routing them through GitHub.
Monitor and respond to AWS security alerts from GuardDuty and Security Hub, as well as externally reported issues.
Manage internal access control and maintain policies for secure development and data handling.
Participate in engineering design reviews and threat modeling sessions.
Coordinate penetration tests, run tabletop exercises, and support organizational security awareness.