{"id":2486056,"url":"https://alion.io/job/disqo-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":674318,"name":"Disqo","domain":"disqo.com","url":"https://alion.io/company/disqo","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":195000,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EKS","optional":false},{"name":"ArgoCD","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Configuration Management","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"Docker","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"Go","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Crowdstrike","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-09-22T18:20:16Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-15T00:06:07Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"About the role:\nYou'll work at the intersection of Site Reliability Engineering and Cloud Security, keeping our platform highly available, scalable and secure by design. We treat infrastructure as software and believe security should enable engineering velocity, not block it.\nYou'll ship most infrastructure, automation and remediation work with AI coding agents. Your core job is to design the guardrails, reviews and tests that make that safe at scale, and to help build the internal agents that run a growing part of our reliability and security operations.\nThe skill we value most is judgment: knowing when an agent's output is wrong, unsafe or not ready for production, and building systems that catch it when you're not looking.\nWhat you will do:\nSRE & Dev Ops:\nInfrastructure as code: Build and run secure, multi-account AWS infrastructure with Terraform and GitOps.\n\nKubernetes: Operate and harden Amazon EKS workloads and the container platform.\n\nService reliability: Define, track and enforce SLOs, SLIs and error budgets across our microservices, including services that depend on LLMs (fallbacks, latency and cost budgets).\n\nObservability: Run and improve our observability stack on Grafana, Newrelic\n\nToil reduction: Write automation in Python or Go. Agents do much of the authoring; you own the design, testing and review.\n\nDeveloper support: Be the go-to partner for engineering teams on infrastructure, deployments and environments. Help them debug build, pipeline and runtime issues, and turn recurring requests into self-service.\n\nInfrastructure enablement: Help teams provision and change infrastructure through reviewed Terraform and GitOps workflows, and support new services from first deploy to production readiness.\n\nCI/CD & release: Maintain and improve build and deployment pipelines, release processes and environment management so teams can ship quickly and safely.\n\nCloud Security:\nAWS security posture: Own IAM, KMS, Secrets Manager, GuardDuty, Security Hub, AWS Config, CloudTrail and Control Tower across our accounts.\n\nZero trust & identity: Enforce least privilege and short-lived credentials for people, services and AI agents alike.\n\nNetwork defense: Design secure network boundaries, egress filtering and WAF rules that limit blast radius.\n\nShift-left security: Embed SAST, SCA, container scanning and policy-as-code (OPA) into GitLab CI and ArgoCD without slowing teams down.\n\nVulnerability management: Scale scanning, triage and code review to match the growing volume of AI-generated code.\n\nSecure by default: Partner with product teams in design reviews so new services follow secure architecture patterns.\n\nDetection & response: Build detections mapped to MITRE ATT&CK and respond to both reliability outages and security incidents as part of the on-call rotation.\n\nAI Native Platform Development:\nInternal agents: Build and operate agents, MCP servers and skills that automate SRE and security workflows.\n\nAgent identity & guardrails: Treat agents as non-human identities with scoped permissions, approval gates for high-risk actions (such as production changes and IAM edits) and full audit trails.\n\nAI supply chain: Vet and pin third-party models, MCP servers and agent plugins the same way we manage open-source dependencies.\n\nData protection for AI: Control what consumer and panel data can reach external model APIs, and set usage and cost limits.\n\nAgent-ready operations: Write runbooks, alerts and blameless postmortems as structured, testable steps an agent can execute, with clear stop conditions.\n\nEvaluation: Test and evaluate agents before they reach production, and monitor them once they do.\n\nDay to Day expectations:\nAI Native Platform (~50%): Building agents, paved paths and guardrails for platform engineering\n\nCloud Security (~30%): Owning AWS security posture, embedding security into CI/CD, and detection and response.\n\nSRE & DevOps (~20%): Running reliable infrastructure, observability, and day-to-day developer and infrastructure support.\n\nWhat you bring to the role:\nExperience: 5+ years of hands-on experience in Site Reliability Engineering (SRE), DevOps, Cloud Engineering, or Cloud Security Engineering roles.\n\nCloud Expertise: Strong production expertise with AWS core services, networking, multi-account governance, and AWS-native security tooling (IAM, GuardDuty, Security Hub, KMS).\n\nInfrastructure as Code: Advanced hands-on proficiency with Terraform, GitOps, and configuration management.\n\nContainers & Kubernetes: In-depth knowledge of Docker and Kubernetes (EKS) administration, deployment, and container runtime security.\n\nCoding & Scripting: Proven ability to write clean, modular automation code in Python or Go (not just configuring tools, but authoring custom automations, tooling, and integrations).\n\nCI/CD Integration: Solid experience building, maintaining, and securing CI/CD pipelines (GitLab CI, ArgoCD, ArgoWorflows).\n\nAI Tooling Adoption: Active, daily experience leveraging AI coding agents and development tools (Claude Code, Cursor, Copilot) to accelerate delivery and automate workflows.\n\nMindset: Strong collaboration, clear communication, and a philosophy that security empowers development velocity rather than acting as a blocker.\n\nPreferred Qualifications:\nCertifications: AWS Certified DevOps Engineer, AWS Certified Security - Specialty, CKA/CKS (Certified Kubernetes Administrator/Security Specialist), or CISSP.\n\nSecOps / EDR Experience: Familiarity with endpoint security (CrowdStrike), modern SIEM/SOAR platforms, and vulnerability management workflows.\n\nCompliance Frameworks: Familiarity with SOC 2 Type I/II, ISO 27001, GDPR, and CCPA compliance requirements in cloud environments.","description_format":"text","description_chars":5694,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Market Research","Media & Audience Measurement"],"lifecycle":[{"event":"open","at":"2026-10-14T00:28:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 2 · green card filings: 4","filings_12m":2,"filings_prev_12m":4,"green_card_filings_12m":4,"median_offered_wage_usd":102500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.858,"p_room":0.9,"age_days":21,"expected_fill_days":44,"reasons":["conf:1","win:mid"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":true},"html_url":"https://alion.io/job/disqo-devsecops-engineer","json_url":"https://alion.io/job/disqo-devsecops-engineer.json","meta":{"generated_at":"2026-10-15T02:52:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4246,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":674318},"rest":"https://alion.io/mcp/rest/get_company?id=674318"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdisqo-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdisqo-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdisqo-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/disqo-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdisqo-devsecops-engineer"}]}