Senior DevSecOps Engineer – Threat Mitigation Overhaul

Vertex Analytics

Contract · Remote · Flexible hours

About the role

Vertex Analytics is revamping the performance and reliability of its flagship customer‑facing platform, codenamed "PulseStream". As a Senior DevSecOps Engineer you will embed security into the CI/CD flow while tuning the infrastructure for low‑latency, high‑throughput operation.

Key responsibilities

• Design and implement automated security scans in GitLab pipelines using Trivy and Snyk for every merge request.
• Refactor existing Docker images to multi‑stage builds, reducing image size by at least 30% and improving startup time.
• Configure AWS WAF and Shield Advanced for the PulseStream API gateway, targeting DDoS mitigation and OWASP Top 10 compliance.
• Introduce chaos engineering experiments with Gremlin to validate service resilience under failure conditions.
• Collaborate with the performance team to integrate New Relic APM dashboards that surface latency hotspots.
• Document the hardened deployment process in Confluence and conduct knowledge‑transfer sessions for the internal SRE crew.

Must-have skills

• Extensive experience with AWS (ECS, EKS, IAM, CloudWatch).
• Proficient in Docker, Kubernetes, and Helm chart management.
• Deep knowledge of CI/CD tooling (GitLab CI, Jenkins) and security scanning integration.
• Strong scripting abilities in Bash/Python for automation.
• Understanding of networking, TLS, and zero‑trust principles.

Nice to have

• Experience with service mesh technologies such as Istio.
• Familiarity with compliance frameworks like SOC 2 or ISO 27001.