Hybrid DevSecOps Engineer - Cloud Security & Threat Hunting

Altium; Los Angeles (CA); Hybrid; USD 150,000 - 160,000; Full time

Job summary

Altium is seeking a DevSecOps Engineer in Los Angeles, a hybrid role focusing on cloud security, threat detection, and secure CI/CD integration. You’ll implement guardrails, automate detections, and partner with compliance to meet GovCloud and ITAR requirements.

This is a security-first role in a fast-moving team reporting to the CISO. You will design secure infrastructure, operate centralized logging, and drive proactive defense using Terraform and modern tooling.

Qualifications

• 7+ years in security engineering, cloud security, or DevSecOps with production ownership.
• BS in Computer Science or related field (or equivalent practical experience).
• Deep AWS security expertise across IAM, KMS, VPC, GuardDuty, Security Hub, Config, CloudTrail, WAF.
• Experience with threat detection/hunting, detection-as-code, and threat intel.
• Experience securing CI/CD pipelines and container/Kubernetes workloads.
• Infrastructure-as-code with Terraform and containerization.

Responsibilities

• Design and operate the security posture of AWS commercial and GovCloud environments.
• Proactively hunt across cloud, application, and identity telemetry; build detections as code.
• Operationalize threat intelligence and drive proactive hardening.
• Architect centralized logging, SIEM, and security monitoring; own dashboards and metrics.
• Implement and administer CSPM, vulnerability management, secrets management, and workload protection.
• Secure GitHub Actions pipelines, integrate SAST/DAST/SCA, and protect containerized workloads.
• Build reproducible, version-controlled security infrastructure and guardrails with Terraform.
• Partner with leadership to evidence SOC 2, ITAR, GovCloud controls; enable AI-augmented security engineering.

Skills

Cloud security

Threat hunting

SIEM

Terraform

GitHub Actions

KMS/IAM

GovCloud

Container security

Education

Bachelor's degree in CS or related field

Tools

AWS GuardDuty

Security Hub

CloudTrail

Config

WAF

Docker

Kubernetes

Job description

Altium is seeking a DevSecOps Engineer in Los Angeles, a hybrid role focusing on cloud security, threat detection, and secure CI/CD integration. You’ll implement guardrails, automate detections, and partner with compliance to meet GovCloud and ITAR requirements.

This is a security-first role in a fast-moving team reporting to the CISO. You will design secure infrastructure, operate centralized logging, and drive proactive defense using Terraform and modern tooling.