• Implement infrastructure-level security measures and remediations across applications as directed by internal security team.
• Stand up, configure, and maintain security scanning and vulnerability management tooling across the platform — for example, dependency/software composition analysis (e.g., npm audit or similar), a vulnerability management platform (e.g., Nucleus), and dynamic application security testing (DAST); specific toolset to be finalized.
• Patch, harden, and update underlying infrastructure, hosts, and cloud configurations tied to security findings.
• Partner with the Software Developer to coordinate application-level and infrastructure-level fixes, and with the Technical Program Manager to keep related stories well-scoped and ready for sprint.
• Evaluate and pilot AI-assisted tooling to speed up vulnerability triage, remediation guidance, or security monitoring where it can meaningfully reduce manual effort.
• Monitor infrastructure and pipelines for new vulnerabilities using existing and newly adopted security tooling.

• Provide infrastructure support as needed for the migration of reporting to the new target data platform, in coordination with the Software Developer and Technical Program Manager.

• Keep cloud infrastructure, CI/CD tooling, and platform components up to date across services.
• Identify and remediate infrastructure-related technical debt across the platform.
• Maintain monitoring, alerting, and observability tooling to support ongoing system health.
• Participate in Agile ceremonies (standups, sprint planning, retrospectives) with the broader team, with a personal backlog focused primarily on security and secondarily on system health and tech debt stories.
• Keep story status, comments, and acceptance criteria current in Jira so the Technical Program Manager can maintain an accurate delivery plan.

• 3–6 years of DevSecOps, infrastructure, or platform engineering experience.
• Deep, hands-on experience with AWS services, including RDS, DynamoDB, API Gateway, Lambda, S3, IAM, and VPC.
• Experience implementing security remediations and operating related tooling — for example, dependency/vulnerability scanning (npm audit or similar), vulnerability management platforms (e.g., Nucleus), and DAST tools.
• Experience building and maintaining CI/CD pipelines using GitHub Actions, AWS CodePipeline, or similar tools.
• Experience with infrastructure as code (e.g., Terraform, CloudFormation, or AWS CDK).
• Comfort working from a clearly defined, prioritized backlog — picking up scoped stories, updating status, and flagging blockers.
• Experience with monitoring and observability tooling such as Datadog or AWS CloudWatch.
• Familiarity with SQL databases.
• Strong communication and interpersonal skill, with comfort coordinating closely with a Technical Program Manager and Software Developer.
• Ability to work both independently and as part of a small, tightly coordinated team.

• Hands-on experience with dependency/software composition scanning, vulnerability management platforms (e.g., Nucleus), or DAST tooling in a production environment.
• Interest or hands-on experience evaluating AI-assisted security or DevOps tooling — e.g., AI-assisted vulnerability triage, code scanning, or remediation suggestions.
• Exposure to broader security vulnerability management, such as CVE triage, or experience working with enterprise security teams.
• Familiarity with data platform or reporting migrations (e.g., Splunk, Snowflake, Sigma, or similar tools).
• Experience with containerization and orchestration (e.g., Docker, ECS, Kubernetes).
• Scripting experience (e.g., Python, Bash, Node) for automation and tooling.
• Experience working on a cross-functional Agile Scrum team.

• Team composition: 1 Technical Program Manager, 1 Software Engineer, 1 DevOps Engineer (this role) (working within a broader delivery team).
• Primary tools: Jira and Confluence (day-to-day use required), plus AWS, GitHub, and security/vulnerability scanning tooling (specific toolset TBD).
• Location and reporting structure: Remote; reports to the Technical Program Manager on this engagement

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, and paid holidays annually – as applicable.