Remote DevSecOps Engineer: Cloud Security & Compliance

Peek; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Peek Travel Inc. is seeking a hands-on DevSecOps Engineer to embed security into our infrastructure, CI/CD pipelines, and cloud environment. You’ll own the controls and evidence for PCI DSS 4.0 and SOC 2 Type II, lead vulnerability remediation, and build disaster recovery testing into our program.

The role is 100% remote, ideally within US time zones, with occasional outside-hours work for upgrades. You’ll collaborate with engineering, IT, and procurement in a fast-paced, security-conscious

Qualifications

• 3+ years in DevSecOps or security engineering.
• Hands-on securing GCP and/or AWS with managed Kubernetes.
• Container and vulnerability management with automated remediation.
• WAF configuration and OWASP Core Rule Set tuning.
• Least-privilege access management across cloud services.
• Working Linux knowledge for OS and package remediation.
• Scripting in Python or Bash.
• CI/CD experience and producing evidence for audits.

Responsibilities

• Own technical security controls across GCP and AWS: least-privilege IAM and RBAC, WAF, container and image security, and secure CI/CD.
• Drive vulnerability remediation end to end: triage, prioritize, and automate fixes, partnering with the rest of the DevOps team on production rollout.
• Build automated scanning and remediation into our pipelines.
• Tune WAF policies and the OWASP Core Rule Set to protect public-facing applications without blocking legitimate traffic.
• Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and drive remediation of findings.
• Contribute to incident response planning and exercises, and ensure backups and recovery processes meet security requirements for encryption, access, and integrity.
• Produce and automate evidence for technical controls, and keep our cloud environments connected to our compliance platform (Drata).
• Serve as technical expert for audits, customer security reviews, and vendor assessments involving sensitive data.

Skills

Cloud security

Security engineering

CI/CD security

Python/Bash scripting

Linux administration

Technical communication

Audit/compliance liaison

Tools

GKE

EKS

Trivy

AWS Inspector

Amazon ECR scanning

GCP Artifact Analysis

ZAP

Cloud Armor

AWS WAF

Cloudflare

Job description

Peek Travel Inc. is seeking a hands-on DevSecOps Engineer to embed security into our infrastructure, CI/CD pipelines, and cloud environment. You’ll own the controls and evidence for PCI DSS 4.0 and SOC 2 Type II, lead vulnerability remediation, and build disaster recovery testing into our program.

The role is 100% remote, ideally within US time zones, with occasional outside-hours work for upgrades. You’ll collaborate with engineering, IT, and procurement in a fast-paced, security-conscious