SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Alvys is an early-stage SaaS platform transforming the $800B US freight industry. As a DevSecOps Engineer, you will protect the platform and customer data by closing cloud security gaps, building security into the software delivery pipeline, managing penetration testing programs, and standing up infrastructure for internal security, IT, and AI tools.
Key Responsibilities:
Cloud Security Architecture: Design and deliver infrastructure changes that strengthen cloud security posture, including network isolation and identity-based access. Implement changes through infrastructure as code, plan rollouts that avoid customer downtime, and coordinate with service owners. Build secure defaults into infrastructure modules so new resources start compliant.
Vulnerability Management & Pipeline Security: Run the vulnerability management program and drive remediation within defined SLAs. Extend security scanning with AI-assisted testing (automated security code review, AI-driven penetration testing). Tune and improve automation for processing security findings.
Penetration Testing: Manage third-party penetration tests end-to-end (scoping, test environments, vendor coordination, findings intake, retesting). Mature internal AI-assisted penetration testing tools into a dependable part of the security program.
Infrastructure for Security & AI Tools: Deploy and operate internal applications in Azure with proper identity, secrets, networking, and backups. Build telemetry pipelines (OpenTelemetry into Azure Monitor) with dashboards and alerts for anomalous activity.
Cross-functional Collaboration: Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work. Write clear runbooks and documentation; produce evidence for SOC 2 compliance.
Tech Stack: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID), Terraform, GitHub Actions, Azure DevOps, Docker, Kubernetes, Azure Container Registry, Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana, Aikido, Cloudflare, and AI tooling (Cursor, Claude, Claude Platform, Grokbot).
Requirements:
Minimum Qualifications:
- Fluent in English (spoken and written)
- 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering
- Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management
- Production experience with infrastructure as code, preferably Terraform
- Experience building and maintaining CI/CD pipelines
- Working knowledge of containers and Kubernetes
- Scripting skills in Python, PowerShell, or Bash
- Understanding of common security risks in cloud and web applications, and how to fix them
- Ability to explain technical risk clearly to engineers and non-engineers
Preferred Qualifications:
- Experience with Azure specifically (private endpoints, VNet integration, Entra ID managed identities)
- Experience with application security testing (SCA, SAST, DAST) and interest in applying AI to security testing
- Experience coordinating penetration tests or working with external security firms
- Experience with OpenTelemetry, Azure Monitor, or similar observability tools (KQL is a plus)
- Familiarity with SOC 2, ISO 27001, or CIS Benchmarks
- Interest in AI tooling and safe deployment/monitoring
- Security certifications (AZ-500, Security+, or similar)
- Background in logistics or transportation
