Remote DevSecOps Engineer: Cloud Security & Compliance

peek; México; A distancia; MXN 2.129.000 - 3.193.000; Jornada completa

Descripción de la vacante

Peek Travel Inc. is seeking a hands-on DevSecOps Engineer to embed security into our infrastructure, CI/CD pipelines, and cloud environment. You’ll own controls to stay PCI DSS 4.0 and SOC 2 Type II compliant, drive vulnerability remediation, and build disaster recovery testing.

Remote-first, US-time-zone alignment preferred. You’ll join a small DevOps team supporting GCP and AWS with IaC, SRE practices, and strong emphasis on security by design and regulatory standards.

Formación

• 3+ years in DevSecOps or security engineering.
• Hands-on with GCP and/or AWS and managed Kubernetes.
• Container and vulnerability management with automated remediation.
• Experience in PCI DSS or SOC 2 environments and producing evidence.
• Clear written communication with both technical and non-technical audiences.

Responsabilidades

• Own technical security controls across GCP and AWS.
• Drive vulnerability remediation end to end.
• Build automated scanning into pipelines.
• Tune WAF policies and OWASP CRS.
• Run PCI DSS vulnerability scanning and remediation.
• Contribute to incident response planning and exercises.
• Produce evidence for technical controls and align with Drata.
• Serve as technical expert for audits and vendor assessments.

Conocimientos

Security engineering

Cloud security

GCP security

AWS security

Kubernetes security

CI/CD pipelines

Python

Bash

Vulnerability management

WAF tuning

Audits & compliance

Herramientas

Trivy

AWS Inspector

ECR scanning

GCP Artifact Analysis

ZAP

Cloud Armor

OWASP Core Rule Set

Descripción del empleo

Peek Travel Inc. is seeking a hands-on DevSecOps Engineer to embed security into our infrastructure, CI/CD pipelines, and cloud environment. You’ll own controls to stay PCI DSS 4.0 and SOC 2 Type II compliant, drive vulnerability remediation, and build disaster recovery testing.

Remote-first, US-time-zone alignment preferred. You’ll join a small DevOps team supporting GCP and AWS with IaC, SRE practices, and strong emphasis on security by design and regulatory standards.