Remote DevSecOps Engineer - Cloud Security & Compliance

NETFORCE Group; Kansas City, Northern (MO, KY); Hybrid; USD 100,000 - 170,000; Full time

Benefits offered by this job

Fully remote work

US time zone alignment

English lessons

Paid vacation and sick days

Onboarding program

Job summary

SoftDoes, a U.S.-based software development company, is seeking a DevSecOps Engineer to harden cloud infrastructure and drive security compliance across environments. You will collaborate with engineering, security, and leadership to pass vendor reviews and enable SOC 2 and ISO 27001 certifications.

You will build secure CI/CD pipelines, implement least-privilege access, and manage logging, monitoring, and incident response.

Qualifications

• Up to 2 years of DevSecOps experience with cloud infrastructure and deployment pipelines.
• English at B2 level or higher; collaboration with US client stakeholders.
• SOC 2 or ISO 27001 experience, even if you were the technical owner not the compliance PM.
• Experience with Vanta, Drata, Secureframe, or similar evidence automation tools.
• Experience working with HIPAA or other regulated client environments.
• AWS certifications such as Solutions Architect or Security Specialty.

Responsibilities

• Build and maintain secure cloud infrastructure and CI/CD pipelines.
• Implement access control, least privilege, and secrets management across environments.
• Standardize logging, monitoring, alerting, and audit trails.
• Create and maintain secure SDLC practices, including code scanning and dependency scanning.
• Set up incident response basics, including runbooks and on-call expectations.
• Compliance readiness for SOC 2 and ISO 27001 by implementing required controls and gathering evidence.
• Vulnerability management and patching routines for infrastructure and dependencies.
• Improve backup, disaster recovery, and business continuity practices.
• Support client security questionnaires with clear technical answers and evidence.

Skills

Cloud security

CI/CD pipelines

Incident response

Documentation

Auditing support

Tools

AWS

Terraform

Docker

Kubernetes

SAST

DAST

Job description

SoftDoes, a U.S.-based software development company, is seeking a DevSecOps Engineer to harden cloud infrastructure and drive security compliance across environments. You will collaborate with engineering, security, and leadership to pass vendor reviews and enable SOC 2 and ISO 27001 certifications.

You will build secure CI/CD pipelines, implement least-privilege access, and manage logging, monitoring, and incident response.