Senior Devsecops - 6 Months (584)

Ubiminds; Oregon; On-site; USD 96,000 - 165,000; Full time

Benefits offered by this job

Equipment provided

Back-office support

Mentoring

English lessons

Referral bonus

Job summary

Ubiminds is seeking a Senior DevSecOps / Cloud Security Engineer for a 6-month contract to strengthen a multi-region AWS platform ahead of a major launch. You will work with a fast-moving US engineering team to implement security controls across IaC, IAM, and network security.

You will review AI-assisted code for security risks, design and enforce CI/CD security gates, and deliver documentation, runbooks, and reports to the client.

Qualifications

• Hands-on AWS security experience in multi-region environments.
• Infrastructure as Code (Terraform and/or CloudFormation).
• IAM design and hardening expertise.
• Familiar with Claude and agentic development workflows and security risk awareness.

Responsibilities

• Run security assessments and threat modeling across AWS.
• Review and remediate launch-critical IaC findings.
• Evaluate AI-assisted code for security risks.
• Build security roadmap: WAF, SAST/DAST, CI/CD gates, secrets management, and IAM hardening.
• Collaborate with client engineers to embed secure practices.
• Produce docs, runbooks, and security reports.

Skills

AWS security

Terraform / CloudFormation

IAM hardening

Threat modeling

Tools

WAF tooling

CI/CD tooling

Job description

Senior DevSecOps / Cloud Security Engineer (6-Month Contract)

About the opportunity Join a security-focused squad to harden a multi-region AWS platform ahead of a major launch milestone, working directly with a fast-moving US engineering team.

About our client Our client is a leader in video-based learning, enabling companies and educational institutions to create, manage, and share video content at scale

What you'll do

• Run security assessments and threat modeling across the AWS environment: network security, secrets management, infrastructure, and IAM
• Review and remediate launch-critical findings in Infrastructure as Code
• Review AI-assisted and AI-generated code for security risk
• Build and execute the security roadmap: WAF, SAST/DAST, security gates in CI/CD, secrets management, and IAM hardening
• Pair with the client’s engineers and in-house DevSecOps hire so practices stay with the team
• Provide documentation, runbooks, and reports to ensure visibility and a record of all work delivered
• Other activities as agreed upon between the client and the team

What you bring (must-haves)

• Hands-on AWS security experience in multi-region environments
• Infrastructure as Code (Terraform and/or CloudFormation)
• IAM design and hardening
• Comfort working with Claude and agentic development workflows, and a clear view of where they introduce security risk

Bonus points for (nice-to-haves)

• CI/CD security tooling (SAST/DAST) and building security gates into pipelines
• WAF configuration and management
• Secrets management at scale
• Experience embedding security into a fast-moving product team

Perks & benefits

Equipment provided — none of that "bring your own device" stuff here. Full back-office support — Legal, Accounting, HR Business Partner, and Delivery team. Career and cultural mentoring — how to show up, stand out, and navigate US work culture. Free English lessons with a native speaker. Referral bonus — recommend Ubi to your tech friends and get paid for it. Florianópolis HQ always open — 100% remote, but the office is there whenever you want it.