DevSecOps Engineer: Cloud Security, SRE, & Compliance

Overflow; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive base salary with equity

Medical, dental, and vision coverage

Generous paid time off and holidays

Paid parental leave

401(k) retirement plan

Mental health stipend

Team retreats and in-person gatherings

Job summary

Overflow is building a first-of-its-kind Platform/DevOps function focused on SRE and security, ensuring high availability, scalability, and robust protection for fintech-grade workloads.

The DevSecOps Engineer will own containerized AWS workloads, automate deployments, and establish observability foundations while driving SOC 2 compliance and PCI Level 1 readiness as the company scales.

Qualifications

• 5+ years in DevOps/SRE or cloud platform roles.
• Hands-on Docker and AWS ECS Fargate experience.
• Strong CI/CD with GitHub Actions.
• Experience maintaining SOC 2 controls and PCI-DSS awareness.
• Ability to implement least-privilege IAM and secure coding practices.

Responsibilities

• Secure, manage, and scale Overflow’s cloud environment with least-privilege IAM, network security, and secret management.
• Refine IaC provisioning and security best practices.
• Deploy observability, logging, and alerting frameworks to detect issues and incidents.
• Own CI/CD pipelines and secure development workflow.
• Lead threat modeling, architectural reviews, and secure coding training.
• Support SOC 2 and PCI-DSS compliance activities.

Skills

DevOps

Site Reliability

Cloud Platforms

Docker

AWS ECS Fargate

CI/CD with GitHub Actions

Security & Compliance

Tools

Docker

AWS

GitHub Actions

IaC (Terraform/CFN)

Job description

Overflow is building a first-of-its-kind Platform/DevOps function focused on SRE and security, ensuring high availability, scalability, and robust protection for fintech-grade workloads.

The DevSecOps Engineer will own containerized AWS workloads, automate deployments, and establish observability foundations while driving SOC 2 compliance and PCI Level 1 readiness as the company scales.