Raya
DevSecOps Engineer
Remote DevSecOps role with clear candidate location fit.
PostedJul 18, 2026
Eligible countries1 accepted country
Seniority signalMiddle
Work settingRemote
Accepted candidate locations
USA
Role overview
DevSecOps Engineer
Requirements and responsibilities
Readable role content extracted into sections for faster review.
Responsibilities
- Security Ownership: Drive software engineering security hygiene end-to-end, from identifying vulnerabilities and misconfigurations to implementing durable fixes across our platform. This includes AWS, Kubernetes, CDN/WAF, and other technologies used in the PDLC
- Cross-Functional Collaboration: Work hand-in-hand with DevOps and Engineering teams to embed security best practices into everyday workflows, without slowing down velocity
- Continuous Learning: Stay current on evolving cloud security threats, tooling, and best practices, ensuring Raya's infrastructure stays ahead of emerging risks
- Findings Remediation: Triage, prioritize, and systematically close out security findings, translating scanner output into practical, actionable engineering fixes
- Operational Excellence: Expand and maintain security checks and guardrails in CI/CD pipelines and the broader PDLC, so security becomes a natural part of how we ship, not an afterthought
Qualifications
- Strong hands-on experience with AWS and Kubernetes/EKS, comfortable navigating cloud infrastructure and container environments from day one
- Solid foundation in security fundamentals: vulnerability management, IAM, network security, and cloud security posture management
- Experience triaging and remediating security findings from vulnerability scanners or cloud security tools
- Familiarity with CI/CD pipelines and integrating security practices into the software development lifecycle
- Strong communication skills, able to work effectively with both DevOps and Security stakeholders and translate technical risk into clear priorities
- Experience with Infrastructure-as-Code (e.g., Terraform/OpenTofu), compliance frameworks, or container security tooling
What Sets You Apart
- Bridge Builder: You naturally sit at the intersection of DevOps and Security, translating between the two and earning trust from both sides
- Impact-driven: You prioritize the fixes and improvements that meaningfully reduce risk, rather than chasing every alert
- Growth-oriented: You possess a perpetual learner's mindset, staying curious about new threats, tools, and cloud-native security practices
- Ownership mentality: You take findings from discovery to resolution without needing to be chased, and you build systems so problems don't recur
- Productivity-obsessed: You value tools, workflows, and automation that make security scalable rather than manual
- Bias toward shipping and iteration: You're able to harden systems incrementally, learn, and refine in short cycles rather than waiting for a "perfect" fix
Similar roles
Keep a backup shortlist.
CI/CD, Kubernetes 1 accepted country
Senior Software Engineer (Java)AppianView role AWS, Kubernetes 1 accepted country
Lead Platform EngineerAppianView role AWS, CI/CD 13 accepted countries
Senior QA Automation EngineerSubway EcommerceView role AWS USA
Senior Technical Program ManagerMorgan StanleyView role Stack
Use these tags to compare similar remote roles.
Location eligibility
Candidates should apply only when their profile country is listed here.
Your profileCountry not setSign in to check your country against this role.
Hiring flow
WithMira shows the role, then sends candidates to the company application.
1Check role fit, stack, and location eligibility in WithMira.
2Open the company application page from the tracked apply link.
3Save the role or subscribe for similar opportunities before leaving.