DevSecOps Engineer

banyansoftware; United States; Hybrid; USD 80,000 - 120,000; Full time

Benefits offered by this job

Medical coverage for employees

401(k) with company match

Life and disability coverage

Wellness benefit

Flexible time off

Paid holidays

Winter break

Internet stipend

Job summary

Banyan Software seeks an engineer to own key parts of our AWS and Kubernetes platform while leading security and compliance work. You will manage SOC 2 and vulnerability programs, build secure CI/CD pipelines, and automate preventive measures.

The role offers hybrid options and potential for remote work within the U.S. The candidate should have 2+ years in DevOps/security, solid AWS/Kubernetes skills, and proficiency in scripting.

Qualifications

• 2+ years of experience in DevOps, platform, SRE, or security engineering.
• Hands-on production experience with Kubernetes, preferred.
• Solid working knowledge of AWS, including IAM, networking, and core services.
• Experience planning and executing infrastructure migrations.
• Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
• Ability to work independently, prioritize well, and figure things out without a playbook.

Responsibilities

• Own Kubernetes on AWS, build, operate, and improve our EKS infrastructure.
• Lead workload migrations onto EKS.
• Maintain and improve CI/CD pipelines with built-in security checks.
• Automate repeatable processes and scripts to reduce manual work.
• Run SOC 2 program in Vanta and track controls, close gaps, stay audit-ready.
• Manage vulnerability management and triage CVEs from scans and findings.
• Monitor AWS security alerts (GuardDuty, Security Hub) and coordinate responses.
• Establish and enforce access control and security policies for development.

Skills

DevOps

Kubernetes

AWS

Scripting (Python/Bash)

Git workflows

Independent work

Communication

Tools

Terraform

GitHub Actions

ECR

Job description

Banyan Software is the best permanent home for software businesses that serve specialized industries, their employees, and their customers. With a buy-grow-and-hold-for-life approach and a permanent capital base, Banyan acquires and grows companies worldwide, honoring founder legacies and helping portfolio companies modernize through shared AI expertise and operational discipline. Founded in 2016, Banyan operates more than 120 portfolio companies across North and South America, Europe, and APAC, and has appeared on the Inc. 5000 list for six consecutive years. The Banyan Software Foundation, endowed with $100 million in Banyan stock, leverages technology to build a greener and more equitable world.

About 10x People:

At 10x People, we build cloud-based numbering software that helps telecom carriers, MVNOs, and CPaaS providers order, port, and manage phone numbers. Founded in 2013 and based in Littleton, Colorado, we serve customers across the U.S. and Canada, and our platform is part of their daily operations. We joined Banyan in September 2026, giving us a permanent home and the resources to keep growing.

The Role:

We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security. It's a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You'll have a direct impact on how we build and ship.

Platform and DevOps

• Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.
• EKS Migrations: Lead and execute workload migrations onto EKS.
• CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.
• Automation: Automate wherever you can. If you do something manually twice, script it.

Security and Compliance

• SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.
• Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.
• Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.
• Access and Policy: Manage internal access control and maintain policies for secure development and data handling.
• Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.
• Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.

Qualifications for success:

• 2+ years of experience in DevOps, platform, SRE, or security engineering.
• Hands-on production experience with Kubernetes, preferred.
• Solid working knowledge of AWS, including IAM, networking, and core services.
• Experience planning and executing infrastructure migrations.
• Proficiency in scripting (Python, Bash, or similar) and Git-based workflows.
• Ability to work independently, prioritize well, and figure things out without a playbook.
• Based in or able to commute to Littleton, CO, with in-office attendance on Tuesdays. Otherwise, will consider remote locations in the U.S.

Nice to have:

• Experience supporting a SOC 2 or ISO 27001 audit, or using Vanta or a similar compliance platform.
• Familiarity with AWS security services such as GuardDuty, Security Hub, CloudTrail, and SCPs.
• Infrastructure as code experience (Terraform, CDK, or similar).
• Experience with SAST/DAST tools or GitHub Advanced Security.
• Relevant certifications (CKA, AWS Security Specialty, etc.).

Compensation & Posting Statement:

The expected base salary for this position is: $80,000 - $120,000 USD . Salary is based on a number of factors including market conditions, location and may vary depending on job-related skills and experience.

• Benefits include fully company-paid medical for employees, a 401(k) with up to 4% company match, company-paid life and disability coverage, a $1,200 annual wellness benefit, flexible time off, paid holidays, a paid winter break, and a monthly internet stipend.

Diversity, Equity, Inclusion & Equal Employment Opportunity at Banyan:

Banyan affirms that inequality is detrimental to our Global Teams, associates, our Operating Companies, and the communities we serve. As a collective, our goal is to impact lasting change through our actions. Together, we unite for equality and equity. Banyan is committed to equal employment opportunities regardless of any protected characteristic, including race, color, genetic information, creed, national origin, religion, sex, affectional or sexual orientation, gender identity or expression, lawful alien status, ancestry, age, marital status, or protected veteran status and will not discriminate against anyone on the basis of a disability. We support an inclusive workplace where assoc