DevSecOps Engineer

DevSecOps engineer at Disqo working across cloud security, site reliability and an AI-native platform, keeping AWS infrastructure available and secure. About half the time goes to building internal agents and their guardrails, 30 percent to cloud security and 20 percent to SRE. The role is on-site in Los Angeles.

On security, the engineer owns AWS posture across IAM, KMS, GuardDuty, Security Hub and CloudTrail, enforces least privilege for people, services and AI agents, designs network boundaries and WAF rules, builds SAST, SCA, container scanning and OPA policy into GitLab CI and ArgoCD, scales vulnerability triage, and writes ATT&CK-mapped detections while sharing on-call. Disqo wants five or more years in SRE, DevOps or cloud security, strong Terraform, EKS and Python or Go, and daily use of AI coding agents.