Remote DevSecOps Engineer: Cloud Security & Compliance

Peek; United States; Remote; MXN 2,015,000 - 2,748,000; Full time

Job summary

Peek Travel Inc. is a remote-first company building security into cloud infrastructure and CI/CD pipelines.

We own technical controls across GCP and AWS, and keep PCI DSS 4.0 and SOC 2 Type II compliance through rigorous testing and evidence generation. As a DevSecOps Engineer, you will drive vulnerability remediation end to end, automate scanning, tune WAF rules, and support audits with clear, audit-ready documentation.

Qualifications

• 3+ years in DevSecOps, security engineering, or related role.
• Hands-on with GCP and/or AWS and managed Kubernetes.
• Ability to produce evidence for technical controls and audits.

Responsibilities

• Own technical security controls across GCP and AWS.
• Drive vulnerability remediation end to end.
• Build automated scanning and remediation into pipelines.
• Tune WAF policies and OWASP Core Rule Set.
• Run PCI DSS vulnerability scanning and remediation.
• Contribute to incident response planning and backups.
• Produce evidence for controls and support audits.

Skills

DevSecOps

Security engineering

Cloud security

GCP/AWS

Kubernetes

IAM/RBAC

Scripting

CI/CD

Compliance audits

Communication

Tools

Trivy

AWS Inspector

ECR scanning

GCP Artifact Analysis

OWASP CRS

Cloud Armor

GitLab CI

GitHub Actions

Job description

Peek Travel Inc. is a remote-first company building security into cloud infrastructure and CI/CD pipelines.

We own technical controls across GCP and AWS, and keep PCI DSS 4.0 and SOC 2 Type II compliance through rigorous testing and evidence generation. As a DevSecOps Engineer, you will drive vulnerability remediation end to end, automate scanning, tune WAF rules, and support audits with clear, audit-ready documentation.