FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in securing cloud environments, particularly GCP and AWS, with a focus on implementing technical security controls, vulnerability management, and compliance with standards such as PCI DSS. Proficient in automating security processes and collaborating with cross-functional teams to enhance security posture.
Highest-signal resume keywords
GCP SecurityAWS SecurityVulnerability ManagementCI/CD Security AutomationPCI DSS Compliance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
DevSecOpsIAMRBACContainer SecurityScripting in PythonScripting in BashWAF ConfigurationVulnerability RemediationLinux KnowledgeAutomated Remediation
Soft Skills
Clear Written Communication
Tools & Technologies
TrivyAWS InspectorAmazon ECRGCP Artifact AnalysisZAPGitLab CIGitHub ActionsJenkinsCodefreshDrata
Certifications & Qualifications
OSCPCISSPCISMAWS Security SpecialtyGCP Security Specialty
Industry Keywords
PCI DSSSOC 2Incident ResponseTechnical ControlsCloud Security Posture
Tech Stack
Tools & technologiesAWSCloudGoogle Cloud PlatformJenkinsKubernetesLinuxPython
About the role
Key responsibilities & impact- Own technical security controls across GCP and AWS, including least-privilege IAM and RBAC, WAF, container and image security, and secure CI/CD
- Drive vulnerability remediation end to end by triaging, prioritizing, and automating fixes
- Partner with the DevOps team on production rollout of remediation
- Build automated scanning and remediation into pipelines
- Tune WAF policies and the OWASP Core Rule Set for public-facing applications
- Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and remediate findings
- Contribute to incident response planning and exercises
- Ensure backups and recovery processes meet encryption, access, and integrity requirements
- Produce and automate evidence for technical controls
- Keep cloud environments connected to Drata
- Serve as technical expert for audits, customer security reviews, and vendor assessments involving sensitive data
Requirements
What you’ll need- 3+ years in DevSecOps, security engineering, cloud security, or a closely related role
- Hands-on experience securing GCP and/or AWS, including managed Kubernetes (GKE, EKS)
- Container and vulnerability management, including building automated remediation
- Experience with tools such as Trivy, AWS Inspector, Amazon ECR scanning, GCP Artifact Analysis, and ZAP
- WAF configuration and OWASP Core Rule Set tuning
- Least-privilege access management across cloud services using IAM and RBAC
- Working Linux knowledge sufficient to remediate OS and package vulnerabilities in VMs and container images
- Scripting in Python, Bash, or similar
- CI/CD experience with GitLab CI, GitHub Actions, Jenkins, Codefresh, or similar
- Experience working in a PCI DSS or SOC 2 environment, including producing evidence for technical controls
- Clear written communication with technical and non-technical audiences
- Mexican work authorization
- Nice to have: low-downtime patching approaches, PCI ASV scanning, Drata or similar compliance automation, serverless platforms, cloud security posture tools, third-party risk reviews involving PII, agentic or AI-assisted penetration testing, and certifications such as OSCP, CISSP, CISM, or AWS/GCP Security Specialty
Benefits
Comp & perks- Equity
- Remote work
- Flexible schedule support for occasional work outside normal business hours
- Equal-opportunity employment
- Disability assistance during the application process