Cloud Security & Offensive DevSecOps Engineer

Jobgether; Oregon; Hybrid; USD 90,000 - 190,000; Full time

Benefits offered by this job

Fully Remote Work

Competitive Salary

Healthcare coverage

Flexible time off

Professional development

Job summary

Jobgether is seeking a Cloud/DevOps Exploitation Specialist based in the United States to strengthen federal IT infrastructure. You will build secure AWS environments, automate IaC with Terraform and Ansible, and validate vulnerabilities across CI/CD, containers, and Kubernetes in approved testing scopes.

This hands‑on, remote role combines cloud engineering, DevSecOps, and offensive security practices to deliver remediation guidance to federal agencies while adhering to engagement rules and

Qualifications

• 5+ years in cloud engineering, DevOps, DevSecOps, or cloud security.
• U.S. citizenship and eligible to obtain a Public Trust at High Risk level.
• Advanced practical Terraform and Ansible in production environments.
• Strong knowledge of AWS IAM, VPC, EC2, S3, KMS, CloudTrail, serverless, containers.
• Hands-on with GitLab CI, GitHub Actions, Jenkins, Docker, Kubernetes/EKS, and Amazon ECR.
• Experience with security assessment and vulnerability tools (Checkov, tfsec, Trivy, Grype, Prowler, ScoutSuite, Semgrep, SAST/DAST, secrets scanners).
• Scripting in Python, Bash, or PowerShell; Linux and networking expertise.
• Operate within customer-provided remote environments, follow rules of engagement, protect data, maintain evidence, and coordinate testing.
• Preferred certifications: AWS Security Specialty, AWS Solutions Architect or DevOps Engineer Professional, Terraform Associate, CKS/CKA, GIAC Cloud Security Automation, etc.
• Experience in federal/regulatory environments is desirable.

Responsibilities

• Cloud Infrastructure Engineering: design and maintain secure AWS infrastructure using Terraform modules and Ansible.
• IaC workflows including remote state management, secrets handling, reviews, testing, deployment, and auditing.
• CI/CD pipeline development to deploy assessment infrastructure with security validations.
• Assess AWS environments, CI/CD, containers, registries, and IaC templates for security weaknesses.
• Validate attack paths including IAM privilege escalation and supply chain risks.
• Test Kubernetes/EKS governance, service accounts, container configs, and breakout vectors.
• Investigate IaC vulnerabilities with tools like Checkov/tfsec; demonstrate exploitation scenarios.
• Harden and monitor environments while enabling reconnaissance and rapid response.
• Develop scripts and APIs, and maintain runbooks and diagrams; produce technical docs.
• Collaborate with engineers and customer stakeholders to ensure reliable, secure capabilities.
• Adhere to customer policies, data handling, evidence management, and stop-work rules.

Skills

Linux

Networking

Git

Scripting

Tools

Terraform

Ansible

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Amazon ECR

Checkov

tfsec

Trivy

Grype

Prowler

ScoutSuite

Semgrep

SAST/DAST

Job description

Jobgether is seeking a Cloud/DevOps Exploitation Specialist based in the United States to strengthen federal IT infrastructure. You will build secure AWS environments, automate IaC with Terraform and Ansible, and validate vulnerabilities across CI/CD, containers, and Kubernetes in approved testing scopes.

This hands‑on, remote role combines cloud engineering, DevSecOps, and offensive security practices to deliver remediation guidance to federal agencies while adhering to engagement rules and