{"id":3119484,"url":"https://alion.io/job/alvys-devsecops-engineer-3","title":"DevSecOps Engineer","company":{"id":671941,"name":"Alvys","domain":"alvys.com","url":"https://alion.io/company/alvys","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":166000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":460},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":".NET","optional":false},{"name":"Angular","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Azure AKS","optional":true},{"name":"Azure Cosmos DB","optional":true},{"name":"Azure DevOps","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Cloudflare","optional":true},{"name":"Cursor","optional":true},{"name":"Docker","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Grafana","optional":true},{"name":"ISO 27001","optional":true},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-22T20:16:01Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-24T06:28:33Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About the Role\nJoin Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors.\nIndustry Insight\nFreight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust.\nAbout Alvys\nAlvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar.\nOur Principles\nEngineering Principles\nBuild for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding.\nExtreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results.\nTechnology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow.\nSimplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load.\nRadical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth.\nEngineering Culture\nMove Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity.\nOwn the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last.\nPartner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one.\nPragmatism Over Purism. Perfect security doesn't exist, but reduced risk does. We choose fixes that scale, are maintainable, and address real threats, not theoretical ones.\nPeople Over Heroics. We don't reward burnout or always-on behavior. Sustainability is a feature, not a luxury. If someone needs to slow down, unplug, or take care of life outside work, that's expected.\nResponsibilities\nCloud security architecture\nDesign and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access.\nMake these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them.\nBuild secure defaults into our infrastructure modules so new resources start out compliant.\nVulnerability management and pipeline security\nHelp run our vulnerability management program, driving remediation within defined SLAs.\nExtend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing.\nTune and improve the automation we already use to process security findings.\nPenetration testing\nManage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting.\nHelp mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs.\nInfrastructure for security, IT, and AI tooling\nDeploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one.\nBuild telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity.\nWorking with others\nPartner with DevOps, engineering teams, and IT & Security to plan and prioritize work.\nWrite clear runbooks and documentation, and produce evidence for our SOC 2 program.\nTech Stack\nCloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID)\nInfrastructure as code: Terraform\nCI/CD: GitHub Actions and Azure DevOps pipelines\nContainers: Docker, Kubernetes, Azure Container Registry\nObservability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana\nSecurity: Aikido, Cloudflare\nAI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot\nApplication code: .NET/C#, TypeScript, Angular, React\nMinimum Qualifications\nFluent in English, spoken and written.\n3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.\nHands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management.\nProduction experience with infrastructure as code, preferably Terraform.\nExperience building and maintaining CI/CD pipelines.\nWorking knowledge of containers and Kubernetes.\nScripting skills in Python, PowerShell, or Bash.\nUnderstanding of common security risks in cloud and web applications, and how to fix them.\nAbility to explain technical risk clearly to engineers and non-engineers.\nPreferred Qualifications\nExperience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities.\nExperience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing.\nExperience coordinating penetration tests or working with external security firms.\nExperience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus).\nFamiliarity with SOC 2, ISO 27001, or CIS Benchmarks.\nInterest in AI tooling and how to deploy and monitor it safely.\nSecurity certifications such as AZ-500, Security+, or similar are a plus.\nBackground in logistics or transportation is a bonus.\nEqual Employment Opportunity\nAlvys is an equal opportunity employer and as such, we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other characteristic protected by applicable laws.\nWe are dedicated to growing a diverse team of highly talented people. We’re dedicated to building a workplace where we give each other the strategies, support, and space we each need to thrive-believing in and bringing out the best of everyone.\nIf you require any accommodations during the recruitment process, whether it be alternate forms of material, accessible meeting rooms, etc., please let us know and we will work with you to meet your needs.\nFor information about Alvys's privacy practices, see our Privacy Policy.","description_format":"text","description_chars":7734,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-22T23:50:27Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["conf:3","wave","velocity","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/alvys-devsecops-engineer-3","json_url":"https://alion.io/job/alvys-devsecops-engineer-3.json","meta":{"generated_at":"2026-10-24T09:31:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13830,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":671941},"rest":"https://alion.io/mcp/rest/get_company?id=671941"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falvys-devsecops-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falvys-devsecops-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falvys-devsecops-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alvys-devsecops-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falvys-devsecops-engineer-3"}]}