Juno · 13 hours ago
Senior DevOps Security Engineer
United States
Full-time
Remote
Senior Level
$140K/yr - $170K/yr
7+ years expJuno is a fast-growing AI company dedicated to empowering tax professionals with innovative technology. The Senior DevOps Security Engineer will manage AWS infrastructure, enhance security measures, monitor systems, and optimize service scalability while collaborating with cross-functional teams to improve processes.
Computer Software
Responsibilities
Oversee and maintain our AWS environment, ensuring optimal performance and cost efficiency
Implement and manage infrastructure as code (e.g., Terraform, CloudFormation) to support agile deployments
Partner with application engineers to perform threat modeling and security design reviews
Monitor, detect, and respond to cloud and infrastructure security events
Develop automated controls for vulnerability management, configuration drift, and policy enforcement
Implement encryption, code signing, and secure configurations across our infrastructure
Integrate security layers, privacy controls, and access management that meet SOC2 compliance requirements
Design, implement, and manage monitoring and alerting systems (e.g., AWS CloudWatch, Prometheus, Grafana) to proactively identify and address issues
Develop automated incident response procedures and collaborate on a robust escalation process
Architect solutions that ensure our microservices and applications scale efficiently under varying loads
Optimize system performance and resource utilization through continuous monitoring and iterative improvements
Work closely with cross-functional teams to streamline deployment pipelines, ensuring smooth integrations and rapid rollouts
Document processes, best practices, and contribute to continuous improvement initiatives across development and operations
Qualification
Required
7+ years of experience in DevOps, infrastructure, or cloud engineering, with a strong security focus
Deep hands-on experience securing AWS environments in production
Advanced experience with Terraform and infrastructure-as-code security best practices
Proven experience embedding DevSecOps controls into CI/CD pipelines, including SAST, DAST, dependency scanning, and secrets detection
Solid understanding of IAM and least-privilege access models
Solid understanding of network security, encryption, and secrets management
Solid understanding of container and cloud-native security concepts
Ability to balance startup speed with financial-grade security
Strong background in DevOps principles, continuous integration/continuous deployment (CI/CD) pipelines, and containerization (Docker, Kubernetes)
Strong working knowledge of OWASP Top 10 and OWASP ASVS, with the ability to translate application security requirements into cloud and pipeline controls
Experience implementing secure software supply chain practices aligned with OWASP dependency and CI/CD security guidance
Deep understanding of cloud security architecture, including IAM, network segmentation, encryption in transit and at rest, and key management
Hands-on experience designing and enforcing least-privilege access models and secure identity federation
Familiarity with vulnerability management, configuration drift detection, and continuous security monitoring in AWS environments
Ability to perform threat modeling and security design reviews for cloud-native and microservices-based applications
Working knowledge of security controls required in regulated environments (e.g., SOC 2, PCI DSS), with an emphasis on preventative and automated controls
Solid scripting skills (e.g., Bash, Python) and experience with automated tooling
Demonstrated understanding of security best practices in cloud environments, including compliance frameworks like SOC2
Excellent problem-solving abilities and a proactive attitude toward troubleshooting and optimization
Effective communication skills with the ability to collaborate across teams and document technical processes clearly
Company
Juno
We’re modernizing tax work by equipping tax pros with the tools they've always wanted.
11-50 employees
H1B Sponsorship
Juno has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2024 (1)
2022 (1)
2021 (1)
Funding
Current Stage
Early StageCompany data provided by crunchbase