Senior DevSecOps Engineer - Remote Security Lead

Campminder; Boulder (CO); Hybrid; USD 165,000 - 196,000; Full time

Benefits offered by this job

Remote work option

Hybrid office in Boulder

Annual bonus program

$500 employer HSA contribution

Job summary

Campminder is seeking a Senior DevSecOps Engineer to own end-to-end data protection, shaping security architecture and PCI/SOC2 compliance. You’ll lead security across CI/CD, cloud-native environments, and container hardening from our Boulder office or work 100% remotely within the United States.

You will partner with DevOps, IT, and engineering to embed security in pipelines, manage secrets, run audits, and drive remediation within SLA timelines.

Qualifications

• Experienced in security engineering or DevSecOps with ownership of both pipeline- and infrastructure-level security.
• Experience configuring IAM and SSO platforms (Okta, Auth0) with cloud-native identity controls.
• Ability to embed security into CI/CD workflows with scanning, secrets management, and policy-as-code.
• Track record of hardening containerized and cloud-native environments (Kubernetes, image scanning).
• Experience with PCI, SOC2 or similar compliance controls (scans, SAQs, evidence).
• Familiarity with centralized cybersecurity solutions, endpoint security, and DLP.

Responsibilities

• Partner with DevOps to integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and drive remediation before production.
• Configure, tune, and harden WAF rules across web applications.
• Collaborate with platform and IT to implement EDR, DLP, vulnerability scanning and SIEM/XDR tooling.
• Manage secrets and credentials in build pipelines with vault-based storage and least-privilege accounts.
• Execute PCI, SOC2, and ISO technical controls: SAQ completion, ASV scans, disaster recovery.
• Harden cloud-native environments and containers, including image scanning and Kubernetes config.
• Coordinate pen testing engagements and remediation within SLA timelines.
• Run security awareness training and AI governance initiatives.

Skills

Security engineering

DevSecOps

IAM & SSO

CI/CD security

Kubernetes hardening

PCI/SOC2 controls

EDR/DLP/SIEM

Security training

AI governance

Communication

Tools

SAST

DAST

SCA

Vault/Secrets mgmt

Kubernetes image scanning

Job description

Campminder is seeking a Senior DevSecOps Engineer to own end-to-end data protection, shaping security architecture and PCI/SOC2 compliance. You’ll lead security across CI/CD, cloud-native environments, and container hardening from our Boulder office or work 100% remotely within the United States.

You will partner with DevOps, IT, and engineering to embed security in pipelines, manage secrets, run audits, and drive remediation within SLA timelines.