DevSecOps Engineer

Resident is an industry leader in the Direct-to-Consumer (e-commerce) space, and we're looking for a DevSecOps Engineer to improve the security of our cloud and production environments. As the sole DevSecOps owner, you will take end-to-end responsibility for designing and implementing security controls across AWS/GCP, and work closely with cross-functional teams to embed security into the way we build software.

Requirements

• 3+ years of hands-on experience in DevOps, SRE, DevSecOps, or Cloud Security roles in production environments
• Strong ownership mindset with proven ability to lead initiatives end-to-end with minimal supervision
• Strong cloud security expertise (AWS or GCP preferred), including IAM, networking, and managed services
• Strong Linux fundamentals and hardening experience; scripting/automation skills in Python and/or Bash
• Solid experience with CI/CD pipelines (GitHub Actions, Jenkins, etc.) and container platforms (Docker, Kubernetes)
• Strong understanding of system architecture, REST APIs, and networking fundamentals (DNS, TCP/IP, load balancing)
• Strong knowledge of authentication and authorization mechanisms (OAuth, OIDC, SAML) and secure token/secret handling
• Hands-on experience implementing security scanning tools (SAST/DAST/SCA), including tuning and enforcing build-blocking when required
• Familiarity with security standards and best practices (OWASP Top 10, NIST, CIS)
• Exposure to AI/ML security and securing LLM integrations - major plus
• Strong English communication skills, with the ability to explain risk clearly to both technical and non-technical stakeholders