Senior DevSecOps Engineer Needed for End-to-End Security Automation

Harbor Softworks

Contract · Remote · Flexible hours

About the role

Harbor Softworks is building the StreamPulse analytics enablement platform to give operations teams real‑time insight into data pipelines. As a Senior DevSecOps Engineer you will embed security controls directly into our CI/CD flow, ensuring data integrity and compliance as we scale analytics workloads.

Key responsibilities

• Design and implement automated security scans for Terraform IaC using Checkov and tfsec.
• Integrate Snyk and Trivy into GitHub Actions pipelines to enforce container hardening for StreamPulse micro‑services.
• Build and maintain a centralized secret management solution with AWS Secrets Manager and HashiCorp Vault.
• Configure AWS GuardDuty and Security Hub alerts for data‑ingestion clusters, providing weekly remediation reports.
• Collaborate with data engineers to embed runtime security policies via Open Policy Agent in Airflow DAG executions.
• Document security baselines and hand‑off procedures for the operations team by project milestone.

Must-have skills

• Extensive experience with CI/CD tools (GitHub Actions, Jenkins).
• Deep knowledge of container security (Docker, Kubernetes, Snyk, Trivy).
• Proficiency in AWS services (ECS, IAM, Secrets Manager, GuardDuty).
• Infrastructure as Code expertise (Terraform, CloudFormation).
• Strong scripting skills in Bash/Python for automation.

Nice to have

• Experience with data pipeline frameworks such as Apache Airflow.
• Familiarity with compliance standards like SOC2 or ISO27001.