{"id":3063880,"url":"https://alion.io/job/cloudstaff-devsecops-engineer-hybrid","title":"DevSecOps Engineer | Hybrid","company":{"id":50080,"name":"Cloudstaff","domain":"cloudstaff.com","url":"https://alion.io/company/cloudstaff","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":{"grade":"B","score":80,"open_postings":123,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Configuration Management","optional":true},{"name":"GitHub Actions","optional":true},{"name":"Microsoft Sentinel","optional":true}],"status":"live","first_seen_at":"2026-09-03T01:56:30Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-24T01:39:03Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"Role Purpose\nThe DevSecOps Engineer runs the day-to-day security and platform engineering for the Nexgen Amazon Web Services (AWS) environment and the DevOps capability. The role hardens the cloud security posture, patches and configures workloads, maintains Infrastructure as Code (IaC), and supports the secure delivery of the in-house applications.\nKey Responsibilities\nHarden the AWS platform against AWS Security Hub findings and the Centre for Internet Security (CIS) Benchmark, tightening security groups and rotating Identity and Access Management (IAM) keys.\nRemediate AWS root account custody, move IAM keys into AWS Secrets Manager, and enable single sign-on through AWS Identity Center to the new Entra ID tenant.\nEnable Amazon GuardDuty malware protection and AWS CloudTrail data events, forwarding events to the Security Information and Event Management (SIEM) platform for detection.\nDefine secure Software Development Lifecycle (SDLC) practices and coding standards for the in-house applications SOHO, Digital and Active Billing.\nStand up GitHub Enterprise with mandatory peer review and a Continuous Integration and Continuous Delivery (CI/CD) pipeline running Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and secrets detection.\nMaintain Infrastructure as Code (IaC) with Terraform and manage workload patching and configuration through AWS Systems Manager, supporting deployments and the release cadence.\nParallel and Cross-Functional Responsibilities\nSupport cloud security posture and vulnerability remediation alongside the Security Operations Engineer, using AWS Config and Microsoft Defender for Cloud.\nDeploy and validate immutable backups of AWS workloads and workload configuration as IaC using AWS Backup, supporting disaster recovery.\nProvide cloud detection support to the SOC Analyst by tuning and validating AWS log sources feeding the SIEM.\nTechnical Environment\nAWS platform, including AWS Config, AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, AWS Identity Center, AWS Secrets Manager and AWS Backup.\nAWS Systems Manager for workload patching and configuration management, with Terraform for Infrastructure as Code (IaC).\nGitHub Enterprise, GitHub Actions, and GitHub Advanced Security for source control, peer review and the Continuous Integration and Continuous Delivery (CI/CD) pipeline.\nIn-house applications SOHO, Digital and Active Billing hosted on AWS, transitioning out from Infotrust, protected by Microsoft Defender for Cloud.\nQualifications\nRequired Skills and Experience\nDemonstrated experience engineering and hardening production AWS environments against recognised security benchmarks.\nHands-on experience with Infrastructure as Code (IaC) using Terraform and with AWS Systems Manager for patching and configuration.\nWorking knowledge of AWS security services, including Security Hub, GuardDuty, CloudTrail, Identity Center and Secrets Manager.\nExperience building and securing Continuous Integration and Continuous Delivery (CI/CD) pipelines with SAST, DAST, SCA and secrets detection.\nPractical understanding of secure Software Development Lifecycle (SDLC) practices, source control with GitHub, and clear written English for engineering documentation.\nHighly Desirable\nAn AWS certification such as AWS Certified Security Specialty, and experience integrating AWS log sources into a Security Information and Event Management (SIEM) platform such as Rapid7 or Microsoft Sentinel.\nExperience with immutable backup and disaster recovery for cloud workloads using AWS Backup and Microsoft Defender for Cloud.\nPerks and benefits\nComprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment\nUp to 24 leave credits per year\nFlexible leave credits which may be used for vacation, emergency and sick leaves\nSuperb and exciting Mid-Year Parties - with items to give away and cash prizes!\nEndless opportunities for career advancement\nExclusive ATM inside the office for employee's convenience\nAnnual Performance Review with Salary Increase\nWe set you up for success with a company-provided PC/Laptop and fiber internet connection\nLook forward to weekly office perks for work from office staff - Free Coffee, Meals and Beer Fridays!\nTop notch workplace with first class VIP lounge and game rooms\nChild friendly spaces to cater to the needs of employees with children, enhancing work-life balance\nParticipate and join our CS Social Clubs and Special Interest Groups to connect with colleagues\nInternational career growth and connections\nUnlimited cash incentives for hired referrals\nMental Wellness Employee Assistance program through Lifeworks\nIn-house psychiatrist available to support employees' well-being\nBecome part of the Employee Share Units program\nCloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.","description_format":"text","description_chars":4945,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Life insurance"],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-22T07:16:33Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.144,"p_room":0.28,"age_days":50,"expected_fill_days":13,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/cloudstaff-devsecops-engineer-hybrid","json_url":"https://alion.io/job/cloudstaff-devsecops-engineer-hybrid.json","meta":{"generated_at":"2026-10-24T05:42:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8137,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50080},"rest":"https://alion.io/mcp/rest/get_company?id=50080"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudstaff-devsecops-engineer-hybrid"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudstaff-devsecops-engineer-hybrid"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudstaff-devsecops-engineer-hybrid"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudstaff-devsecops-engineer-hybrid\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudstaff-devsecops-engineer-hybrid"}]}