Devops Security Analyst

Association Of Universities For Research In Astronomy; La Serena; Hybrid; CLP 18,000,000 - 30,000,000; Full time

Job summary

Association of Universities for Research in Astronomy seeks a hands-on Security DevOps Engineer to integrate security into the software delivery lifecycle. You will own secure CI/CD pipelines, IaC security, and threat modeling while collaborating with distributed teams in La Serena.

The role emphasizes mentorship, incident response, and secure coding practices. The ideal candidate brings 4+ years in a security-adjacent technical role, strong Python/Go/Bash skills, and experience with Kubernetes,

Qualifications

• 4+ years of experience in software engineering, platform engineering, or a security-adjacent technical role.
• Proficiency in at least one programming or scripting language (Python/Go/Bash).
• Hands-on experience with Kubernetes and containerized workloads.
• 3+ years with Git-based workflows including branching, code reviews, and PRs.
• Experience with at least one major cloud provider (AWS, GCP, or Azure) and core security services.
• Familiarity with Infrastructure-as-Code tools such as Terraform or Ansible.
• Knowledge of security scanning tools such as Trivy, Semgrep, Checkov, or similar.
• Strong written and verbal English communication skills, able to document findings clearly.

Responsibilities

• Develop, deploy, configure, test, and maintain DevOps services.
• Build and improve secure CI/CD pipelines with automated security checks (SAST, SCA, secret scanning, image scanning).
• Implement infrastructure-as-code security controls and policy-as-code rules; automate compliance checks.
• Hardening Kubernetes clusters and container workloads; enforce network policies and image security standards.
• Provide guidance to upper management and participate in threat modeling sessions for new features.
• Assist in security incident response, including investigation and containment.
• Monitor security posture with observability and alerting tools; escalate anomalies.
• Collaborate with development teams to promote secure coding practices and document guidelines.
• Participate in code and architecture reviews with a security focus; mentor junior engineers.
• Perform other duties as assigned.

Skills

Python/Go/Bash

Threat modeling

Security incident response

Mentoring

Education

4+ years experience in software/security-adjacent role

Tools

Kubernetes

Terraform/Ansible

Trivy/Semgrep/Checkov

Git-based workflows

CI/CD platforms

Job description

The Security DevOps Engineer (DevSecOps) is a hands‑on technical role responsible for integrating security practices into the software delivery lifecycle, from code commit to production deployment. Working within a collaborative engineering team, this role contributes to the design and operation of secure CI/CD pipelines, cloud and on‑premises infrastructure hardening, and compliance automation across distributed systems environments. The successful candidate is a self‑driven engineer who brings both security expertise and strong development skills. This individual is comfortable independently owning workstreams, participating in code reviews and threat modeling exercises, and partnering with senior engineers and cross‑functional teams on broader platform initiatives. This role requires collaboration with geographically distributed teams and may occasionally require after‑hours availability.

Work Modality

• On-site in La Serena, Chile
• Full or Hybrid Teleworking

Essential Functions

• Develop, deploy, configure, test, and maintain DevOps services
• Build, maintain, and improve secure CI/CD pipelines by integrating automated security checks including SAST, SCA, secret scanning, and container image scanning
• Implement and enforce Infrastructure‑as‑Code security controls, policy‑as‑code rules, and automated compliance checks across cloud environments
• Contribute to the hardening of Kubernetes clusters and containerized workloads, including network policies, access controls, and image security standards
• Provide technical guidance and support to upper management throughout decision‑making processes
• Participate in threat modeling sessions for new features and system changes to identify and document security risks
• Assist in security incident response efforts, including investigation, containment, and post‑incident reviews
• Monitor infrastructure and application security posture using observability and alerting tools; elevate anomalies as appropriate
• Collaborate with development teams to promote secure coding practices and contribute to internal security documentation and guidelines
• Participate in code and architecture reviews with a security‑focused perspective
• Mentor and support less experienced engineers

Other Functions

• Perform other duties as assigned

Required Education, Experience, Skills & Abilities

• 4+ years of experience in software engineering, platform engineering, or a security‑adjacent technical role
• Working proficiency in at least one programming or scripting language such as Python, Go, Bash, or Ruby
• Hands‑on experience with Kubernetes and containerized workloads, including basic security configuration and troubleshooting
• 3+ years of experience with Git‑based workflows, including branching strategies, code reviews, and pull requests
• Practical experience with at least one major cloud provider (AWS, GCP, or Azure) and its core security services
• Experience working with CI/CD platforms
• Familiarity with Infrastructure‑as‑Code tools such as Terraform or Ansible
• Knowledge of security scanning tools such as Trivy, Semgrep, Checkov, or similar technologies
• Strong written and verbal communication skills in English, including the ability to clearly document findings and explain security concepts to peers
• Experience mentoring junior engineers
• Clean driving record
• Ability (or willingness to learn) to drive 4WD vehicles
• Availability to work at observatory summit facilities above 2500 meters 2–3 times per week unless hired as full teleworking

Preferred Qualifications

• Certified Kubernetes Administrator (CKA) or Certified Kubernetes Security Specialist (CKS) certification
• Experience with policy‑as‑code frameworks such as OPA or Kyverno
• Familiarity with secrets management platforms
• Exposure to software supply‑chain security concepts including SBOM, Sigstore/Cosign, or SLSA
• Experience with monitoring and observability stacks such as Prometheus, Grafana, ELK, or Loki
• Experience writing Helm charts or working with Kubernetes package management
• Familiarity with configuration management tools such as Ansible, Puppet, or Salt
• AWS Certified Security – Specialty, AWS Certified DevOps Engineer, or equivalent cloud security certifications
• Contributions to open‑source security or infrastructure projects
• Hands‑on experience with Infrastructure as Code
• Extensive experience with software‑defined storage platforms such as Ceph

Physical Demands

• Must be able to remain in a stationary position at least 50% of the time.
• Occasional need to move about inside the office environment to access files, office tools, attendance in a meeting room, etc.
• Constantly operates a computer and other office productivity tools that require fine motor skills, such as a calculator, copy machine, computer printer, etc.
• May occasionally need to position self to maintain computer and related tools.
• Seldomly needed to move objects up to 10 pounds.
• Constant communication with other individuals. Must be able to discern and exchange information as appropriate to the situation.
• Constant need to distinguish, discern, and identify a variety of objects and fine details with accuracy.

The above statements are intended to describe the general nature and level of work being performed by individuals assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities and skills required by personnel so classified. This Institute promotes Equal Employment Opportunity workplace that includes reasonable accommodations to otherwise qualified, disabled applicants and employees.

Salaries for positions hired in Chile meet Chile national market rates and internal scales for AURA.

Why Join AURA

AURA offers an excellent benefits package including paid time off and retirement plan contributions, competitive salary commensurate with experience, and a very attractive work environment. Details on benefits can be found at Benefits by Location - Aura Human Resources.

Also we offer a multicultural and collaborative work environment, committed to scientific and operational excellence. Joining our team means contributing to the success of globally significant astronomical projects, within an organization that values safety, integrity, and continuous improvement.