DevSecOps Engineer (Cloud Security and Compliance)

Come Back Agency helps US software and technology companies run their hiring process. We work with delivery and leadership teams to define roles, screen candidates, and manage interviews. Successful candidates are hired directly by the company and become part of its team.

This position is with a US-based software company providing custom development and AI implementation for North American clients. The team builds and maintains production software, including AI-enabled systems, and works in long-term client engagements. Team members operate as part of an internal, distributed team and collaborate directly with client stakeholders.

About the Role
As we scale our operations to meet enterprise demands, we are looking for a driven DevSecOps Engineer who can help harden our cloud infrastructure, elevate our security posture, and drive compliance readiness. In this role, you’ll play a pivotal part in helping us pass enterprise vendor reviews and achieve key certifications like SOC 2 and ISO 27001. You will work closely with cross-functional engineering and leadership teams spanning infrastructure, security, and compliance.

What You Will Do
Infrastructure & CI/CD: Build, scale, and maintain secure cloud infrastructure and automated CI/CD pipelines.
Access & Security: Implement robust access controls, least privilege principles, secrets management, and security hardening across environments.
Observability & Auditing: Standardize logging, monitoring, alerting, and comprehensive audit trails.
Secure SDLC: Drive secure software development lifecycle practices, including code scanning, dependency scanning, and change control.
Incident Response: Establish baseline incident response procedures, including runbooks, on-call expectations, and structured post-incident reviews.
Compliance Readiness: Take ownership of technical controls and evidence gathering for SOC 2 and/or ISO 27001 frameworks.
Vulnerability Management: Maintain proactive vulnerability patching routines for infrastructure and dependencies.
Reliability & Recovery: Enhance backup, disaster recovery, and business continuity practices.
Client Security Support: Respond to client security questionnaires and support audits with clear technical answers and evidence.

Requirements
Experience: 2+ years of hands-on DevOps experience managing cloud infrastructure and deployment pipelines.
Cloud & IaC: Strong practical experience with AWS (IAM, networking, compute, logging) and Terraform (Infrastructure as Code).
Containers & GitOps: Hands-on experience with Kubernetes (Amazon EKS preferred), Helm, and GitOps workflows (ArgoCD or similar).
CI/CD: Experience building and configuring CI/CD pipelines from scratch (e.g., Bitbucket Pipelines, GitLab CI, GitHub Actions).
Security & Compliance: Familiarity with modern security tooling (SAST, DAST, dependency scanning, secret scanning), combined with hands-on experience in SOC 2 and/or ISO 27001 compliance preparation (controls implementation, gap analysis, and evidence collection using Security Hub or similar cloud security tooling).
Documentation & Process: Strong ability to document systems clearly and collaborate effectively with auditors or compliance platforms.
Communication: B2+ English level (upper-intermediate or higher) for seamless daily collaboration with US-based client stakeholders.

Nice to Have
AWS certifications (e.g., DevOps Engineer - Professional or SysOps Administrator Associate).
Experience with compliance automation tools such as Vanta, Drata, or Secureframe.
Background working in regulated industries (e.g., HIPAA).

What We Offer
Working hours aligned with US time zones, typically 16:00–23:59 Kyiv time.
Company-sponsored English lessons to support clear and confident communication.
Paid vacation and sick days.
Fully remote work.
Opportunities for professional growth within the team.
Structured, personalized onboarding to help you ramp up effectively.

Apply with your resume and a short note outlining your relevant experience. You can also submit it through our website at comeback.ua. Selected candidates will be contacted by Come Back Agency.