SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Atlys is building an AI-first platform to remove friction from global travel, having processed visas for 1M+ travelers across 127 countries. The company handles highly sensitive data including passports, financial documents, photographs, and identity records flowing between travelers, partners, and government systems.
As DevSecOps Engineer, you will own the cloud infrastructure, security posture, and reliability of the platform processing this sensitive data at scale. This is not a ticket-closing role—you'll treat infrastructure and security as products, designing systems that are secure by default and automating away toil.
Key responsibilities:
- Own and build scalable AWS/GCP infrastructure using Kubernetes, making deployments repeatable and fast
- Design access controls and audit logging across internal tooling and cloud infrastructure for personally identifiable information (passports, financial documents) in line with compliance and data security requirements
- Secure the supply chain by adding SAST, DAST, dependency scanning, and container scanning to CI/CD; run vulnerability management and penetration tests
- Discover, validate, and fix security gaps including business logic flaws, authorization issues, authentication bypasses, and injection vulnerabilities
- Make pragmatic trade-offs between security, speed, and developer experience; explain risk clearly and bring engineers along rather than acting as a gatekeeper
You'll work with a small, high-ownership team with outsized ambition, solving hard problems at the intersection of travel and government infrastructure.
REQUIREMENTS:
- 4–6 years of experience in infrastructure, DevOps, SRE, or security engineering roles, ideally at a fast-growing product company handling sensitive or regulated data
- Deep hands-on experience with any public cloud, Linux, networking, Docker, and Kubernetes
- Strong grounding in security fundamentals including OWASP Top 10 and cloud security best practices, applied in production
- Ability to own security gaps in the application layer and validate/fix them across the tech stack
- Prior web/backend development experience is nice to have
