Dev Sec Ops Engineer

About the role

Peek is seeking a hands‑on DevSecOps Engineer to embed security into its cloud infrastructure, CI/CD pipelines, and overall development lifecycle. The role is fully remote, supporting a fast‑growing experiences platform that must stay PCI DSS 4.0 and SOC 2 Type II compliant.

Key responsibilities

• Own and implement technical security controls across GCP and AWS, including least‑privilege IAM, RBAC, WAF, and container image security.
• Drive end‑to‑end vulnerability remediation: triage, prioritize, automate fixes, and coordinate production roll‑outs with the DevOps team.
• Build automated scanning and remediation into CI/CD pipelines using tools such as Trivy, AWS Inspector, and GCP Artifact Analysis.
• Run PCI DSS vulnerability scans, manage quarterly external ASV scans, and produce evidence for compliance platforms like Drata.
• Contribute to incident‑response planning, disaster‑recovery testing, and ensure backup processes meet encryption and integrity requirements.

Required profile

• 3+ years of experience in DevSecOps, cloud security, or a closely related engineering role.
• Hands‑on experience securing GCP and/or AWS environments, including managed Kubernetes (GKE or EKS).
• Comfortable communicating technical controls to auditors and non‑technical stakeholders.
• Ability to work across time zones (UTC‑10 to UTC‑4) and occasionally outside normal business hours for infrastructure upgrades.

Required skills

• GCP and AWS cloud platforms, IAM, RBAC, and WAF configuration (Cloud Armor, AWS WAF, Cloudflare).
• Kubernetes orchestration and container image scanning (Trivy, Amazon ECR scanning, GCP Artifact Analysis, ZAP).
• Scripting in Python or Bash for automation.
• CI/CD pipeline tools such as GitLab CI, GitHub Actions, Jenkins, or Codefresh.
• Experience with PCI DSS, SOC 2 compliance, and evidence generation for platforms like Drata.