Senior DevSecOps Engineer

Role Overview:

• You will own end-to-end data protection at Campminder, architecting security infrastructure and carrying PCI/SOC2 programs through every audit.
• You will set the roadmap that keeps us ahead of real threats and coordinate with the engineering organization on security matters.

Key Responsibilities:

• Integrate security scanning (SAST, DAST, SCA) into CI/CD pipelines and drive remediation before code reaches production.
• Configure, tune, and harden WAF rules across web applications; manage EDR, DLP, vulnerability scanning, and SIEM/XDR tooling across servers and endpoints.
• Execute PCI, SOC2, and ISO technical controls including SAQ completion, quarterly ASV scans, and disaster recovery implementation.

What We're Looking For:

• Experienced in security engineering or DevSecOps, with hands-on ownership of pipeline-level and infrastructure-level security.
• Comfortable configuring IAM and SSO platforms (Okta, Auth0) and hardening containerized environments including Kubernetes.
• Strong communication skills to collaborate with engineers and support them in implementing security best practices.