DevSecOps Engineer: Harden AWS/EKS & Secure Pipelines

Raya; United States; Remote; USD 160,000 - 190,000; Full time

Job summary

Raya is seeking a security-focused DevOps Engineer to harden our AWS/EKS environment and systematically close security findings across the PDLC. You will drive security hygiene end-to-end, collaborating with DevOps and Engineering to embed best practices without slowing velocity.

You will triage findings, automate checks in CI/CD pipelines, and contribute to cloud security governance using IaC tools like Terraform/OpenTofu. Strong communication is essential.

Qualifications

• Strong hands-on experience with AWS and Kubernetes/EKS.
• Solid foundation in security fundamentals: vulnerability management, IAM, network security, and cloud security posture management.
• Experience triaging and remediating security findings from vulnerability scanners or cloud security tools.
• Familiarity with CI/CD pipelines and integrating security practices into the software development lifecycle.
• Strong communication skills, able to work effectively with both DevOps and Security stakeholders and translate technical risk into clear priorities.
• Experience with Infrastructure-as-Code (e.g., Terraform/OpenTofu), compliance frameworks, or container security tooling.

Responsibilities

• Security Ownership: Drive software engineering security hygiene end-to-end, from identifying vulnerabilities and misconfigurations to implementing durable fixes across our platform.
• Cross-Functional Collaboration: Work hand-in-hand with DevOps and Engineering teams to embed security best practices into everyday workflows, without slowing down velocity
• Continuous Learning: Stay current on evolving cloud security threats, tooling, and best practices, ensuring Raya's infrastructure stays ahead of emerging risks
• Findings Remediation: Triage, prioritize, and systematically close out security findings, translating scanner output into practical, actionable engineering fixes
• Operational Excellence: Expand and maintain security checks and guardrails in CI/CD pipelines and the broader PDLC, so security becomes a natural part of how we ship, not an afterthought

Skills

AWS

Kubernetes/EKS

Security fundamentals

Vulnerability management

IAM

Network security

CI/CD security

Communication skills

Cloud policy awareness

Tools

Terraform

OpenTofu

Container security tooling

Job description

Raya is seeking a security-focused DevOps Engineer to harden our AWS/EKS environment and systematically close security findings across the PDLC. You will drive security hygiene end-to-end, collaborating with DevOps and Engineering to embed best practices without slowing velocity.

You will triage findings, automate checks in CI/CD pipelines, and contribute to cloud security governance using IaC tools like Terraform/OpenTofu. Strong communication is essential.