DevSecOps Engineer

Alvys

About The Position

Alvys is hiring a DevSecOps Engineer to help protect its multi-tenant SaaS platform and customer data. The role combines hands-on cloud infrastructure and security work with coordination across DevOps, engineering, IT & Security, and external security vendors. The engineer will improve cloud security, integrate security checks into software delivery, manage penetration testing, and deploy infrastructure for internal security, IT, and AI tools. Alvys builds software for transportation operations in the freight industry. Security is treated as a shared responsibility, and the role is expected to help teams reduce practical risks while supporting reliable, maintainable systems. The company describes its engineering culture as focused on ownership, pragmatic risk reduction, partnership, transparency, learning, and sustainable work practices.

Requirements

Fluent in spoken and written English.
At least 3 years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management.
Production experience with infrastructure as code, preferably Terraform.
Experience building and maintaining CI/CD pipelines.
Working knowledge of containers and Kubernetes.
Scripting skills in Python, PowerShell, or Bash.
Understanding of common cloud and web application security risks and how to remediate them.
Ability to explain technical risk clearly to engineers and non-engineers.

Nice To Haves

Experience with Azure, including private endpoints, VNet integration, and Entra ID managed identities.
Experience with application security testing (SCA, SAST, DAST) and interest in applying AI to security testing.
Experience coordinating penetration tests or working with external security firms.
Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries; KQL is a plus.
Familiarity with SOC 2, ISO 27001, or CIS Benchmarks.
Interest in AI tooling and how to deploy and monitor it safely.
Security certifications such as AZ-500, Security+, or similar.
Background in logistics or transportation.

Responsibilities

Design and deliver cloud infrastructure changes that strengthen security, including network isolation and identity-based access.
Implement infrastructure changes through infrastructure as code, plan rollouts to avoid customer downtime, and coordinate application updates with service owners.
Build secure defaults into infrastructure modules so new resources are compliant from the outset.
Help run vulnerability management and drive remediation within defined SLAs.
Extend security scanning with AI-assisted testing, including automated security code review and AI-driven penetration testing.
Improve automation used to process security findings.
Manage third-party penetration tests end to end, including scoping, targeting, test environments and accounts, vendor coordination, findings intake, and retesting.
Help mature and operate the internal AI-assisted penetration-testing tool, including deployment and scheduled runs.
Deploy and operate internal applications in Azure, configuring identity, secrets, networking, and backups.
Build telemetry pipelines using OpenTelemetry and Azure Monitor for AI and internal tools, including dashboards and alerts to surface anomalous activity.
Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work.
Write runbooks and documentation, and produce evidence for the SOC 2 program.