GRC Analyst
bswift
We are looking for a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and production support, while also handling DevSecOps responsibilities.
This is a hands-on role requiring strong AWS, Terraform/IaC, cloud security, SOC 2, and production operations experience. The role will also support segregation of duties (SoD) between development, infrastructure, security, and production environments.
Hours: 30–40 hours/week | Work: Remote, US business hours
Own and manage AWS infrastructure, deployments, migrations, and production environments.
Manage Terraform/IaC, AWS IAM, permissions, security groups, and access controls.
Manage employee onboarding/offboarding access and conduct periodic access reviews.
Support DevSecOps, production monitoring, troubleshooting, and deployments.
Maintain segregation of duties and appropriate production access controls.
Support SOC 2 audits, compliance activities, evidence collection, and security policy reviews.
Conduct vulnerability testing and remediation using tools such as AppCheck.
Own assigned Disaster Recovery testing, documentation, and improvements.
Manage and document the AWS SageMaker environment.
Support security posture monitoring using SecurityScorecard.
Manage endpoint security through Scalefusion.
Conduct security awareness and policy training.
Maintain infrastructure, security, and asset documentation.
Support client onboarding and secure AWS environment/data setup.
7+ years of experience in Cloud Infrastructure, Security Engineering, DevOps, or DevSecOps.
Strong hands-on AWS experience in production environments.
Strong Terraform / Infrastructure as Code experience.
Experience with AWS IAM, security groups, access management, and cloud security.
Experience with production monitoring, troubleshooting, and deployments.
Experience with SOC 2, security audits, compliance, and audit evidence.
Experience with DR testing, vulnerability management, and security controls.
Strong understanding of DevSecOps and segregation-of-duties principles.
Ability to work independently and take ownership with limited supervision.
Experience in banking, financial services, fintech, or regulated environments.
Experience with AppCheck, SecurityScorecard, and/or Scalefusion.
Experience supporting SOC 2 Type II environments.
Remote candidates may be considered from USA, Canada, Germany, Spain, Ireland, Israel, EU countries, and India, with the ability to work during US business hours.
Core Technologies: AWS | Terraform | IAM | SageMaker | DevSecOps | SOC 2 | AppCheck | SecurityScorecard | Scalefusion
Originally posted on Himalayas
bswift
Metabase
Robinhood
MongoDB
GitLab
Datadog
Block
Abnormal AI
First Quality
RecargaPay
Samsara
Sezzle
World Business Lenders
Velera
SOFTSWISS
Axonect
SHI International Corp.
Solidigm
mercor
Sigma Software
Tusker
Kirtland Credit Union
Bright Vision Technologies
Trade Technology
Kong
Chainguard
Arctiq
peopleworth
Samsara
Pinnacle Group
We are looking for a Senior Security & Infrastructure Engineer to independently manage AWS infrastructure, security operations, access management, compliance, monitoring, DR, and production support, while also handling DevSecOps responsibilities.
This is a hands-on role requiring strong AWS, Terraform/IaC, cloud security, SOC 2, and production operations experience. The role will also support segregation of duties (SoD) between development, infrastructure, security, and production environments.
Hours: 30–40 hours/week | Work: Remote, US business hours
Own and manage AWS infrastructure, deployments, migrations, and production environments.
Manage Terraform/IaC, AWS IAM, permissions, security groups, and access controls.
Manage employee onboarding/offboarding access and conduct periodic access reviews.
Support DevSecOps, production monitoring, troubleshooting, and deployments.
Maintain segregation of duties and appropriate production access controls.
Support SOC 2 audits, compliance activities, evidence collection, and security policy reviews.
Conduct vulnerability testing and remediation using tools such as AppCheck.
Own assigned Disaster Recovery testing, documentation, and improvements.
Manage and document the AWS SageMaker environment.
Support security posture monitoring using SecurityScorecard.
Manage endpoint security through Scalefusion.
Conduct security awareness and policy training.
Maintain infrastructure, security, and asset documentation.
Support client onboarding and secure AWS environment/data setup.
7+ years of experience in Cloud Infrastructure, Security Engineering, DevOps, or DevSecOps.
Strong hands-on AWS experience in production environments.
Strong Terraform / Infrastructure as Code experience.
Experience with AWS IAM, security groups, access management, and cloud security.
Experience with production monitoring, troubleshooting, and deployments.
Experience with SOC 2, security audits, compliance, and audit evidence.
Experience with DR testing, vulnerability management, and security controls.
Strong understanding of DevSecOps and segregation-of-duties principles.
Ability to work independently and take ownership with limited supervision.
Experience in banking, financial services, fintech, or regulated environments.
Experience with AppCheck, SecurityScorecard, and/or Scalefusion.
Experience supporting SOC 2 Type II environments.
Remote candidates may be considered from USA, Canada, Germany, Spain, Ireland, Israel, EU countries, and India, with the ability to work during US business hours.
Core Technologies: AWS | Terraform | IAM | SageMaker | DevSecOps | SOC 2 | AppCheck | SecurityScorecard | Scalefusion
Originally posted on Himalayas