RRemoteville

How Remoteville checks and expires listings

Zafran Security logoZafran Security

Senior DevOps Engineer, Security & Compliance

Skills
DevopsCCSPEvidence CollectionISO 27001ISO StandardsIdentity And Access ManagementInformation Security
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 5+ years of DevOps or platform engineering experience with a strong security focus
  • Direct experience implementing controls for SOC 2 ISO 27001 HIPAA PCI or FedRAMP
  • Deep AWS security knowledge including IAM KMS GuardDuty Security Hub VPC design and Config
  • Strong Kubernetes security experience including network policies admission control and runtime security
  • Infrastructure as Code with Terraform and policy as code experience
  • CI/CD security experience including SAST DAST SCA image scanning and supply chain hardening
  • Solid scripting skills in Python or Bash
  • US location required with U.S. citizenship or Green Card due to FedRAMP eligibility

Nice to have

  • Team leadership
  • FedRAMP experience
  • GovCloud experience
  • AWS Security Specialty
  • CISSP
  • CCSP

Day to day

  • Lead compliance engineering efforts to achieve and maintain SOC 2 ISO 27001 and FedRAMP readiness
  • Design and harden AWS Kubernetes and CI/CD environments with security controls for regulated customers
  • Build automation logging and evidence collection systems to support continuous compliance and auditability
  • Implement secrets management IAM hardening network segmentation encryption standards and incident response support