TinyFish
Senior DevSecOps Engineer
Los Altos, CA · Hybrid · Senior · Full-time · Posted Aug 25, 2026
- Experience
- 5+ years.
About the job
Owns and executes TinyFish’s security program across cloud infrastructure and product engineering, with a focus on vulnerability remediation, automated controls, and incident readiness.
What you'll do
- Manage the vulnerability lifecycle, from discovery and triage through remediation, verification, and reporting.
- Implement AWS and software-development security controls, review designs, and guide engineering teams on security risks.
- Support incident response and assurance initiatives, including SOC 2 and ISO 27001 evidence and remediation.
What they ask for
- 5+ years of hands-on experience in DevSecOps, cloud security, application security, security engineering, or a related role.
- Experience operating a vulnerability-management program and driving findings through verified remediation.
- Strong AWS security knowledge and production experience with infrastructure as code.
- Experience securing CI/CD pipelines and practical security tooling; ability to automate workflows with a scripting language.
Nice to have
- Experience securing containerized or isolated workloads such as ECS, EKS, or Kubernetes.
- Experience with AWS security services, SIEM or detection engineering, compliance automation, or penetration testing.
Tools
AWS, Terraform, GitHub Actions, Python, Bash, ECS, EKS, Kubernetes
AI focus
Secures infrastructure and products for an AI-powered web automation platform; no specific AI development work is stated.
Model-written summary · the original posting is authoritative