← All roles

Dev Sec Ops Engineer

Peek· Engineering
Apply on company site
RemoteMXN 75k/mo - MXN 85k/moFull-timePosted 4w ago

About the role

Hands-on DevSecOps role embedding security into infrastructure, CI/CD pipelines, and cloud environments; responsible for PCI DSS 4.0 and SOC 2 Type II compliance, vulnerability remediation, and disaster recovery testing in a remote-first, US-time-zone-preferred team.

Responsibilities

  • Own technical security controls across GCP and AWS: least-privilege IAM and RBAC, WAF, container and image security, and secure CI/CD.
  • Drive vulnerability remediation end to end: triage, prioritize, and automate fixes, partnering with the rest of the DevOps team on production rollout.
  • Build automated scanning and remediation into our pipelines.
  • Tune WAF policies and the OWASP Core Rule Set to protect public-facing applications without blocking legitimate traffic.
  • Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and drive remediation of findings.
  • Contribute to incident response planning and exercises, and ensure backups and recovery processes meet security requirements for encryption, access, and integrity.
  • Produce and automate evidence for technical controls, and keep our cloud environments connected to our compliance platform (Drata).
  • Serve as technical expert for audits, customer security reviews, and vendor assessments involving sensitive data.

Qualifications

  • 3+ years in DevSecOps, security engineering, cloud security, or a closely related role
  • Hands-on experience securing GCP and/or AWS, including managed Kubernetes (GKE, EKS)
  • Container and vulnerability management, including building automated remediation (tools such as Trivy, AWS Inspector, Amazon ECR scanning, GCP Artifact Analysis, ZAP)
  • WAF configuration and OWASP Core Rule Set tuning (Cloud Armor, AWS WAF, Cloudflare, or similar)
  • Least-privilege access management across cloud services (IAM, RBAC)
  • Working Linux knowledge sufficient to remediate OS and package vulnerabilities in VMs and container images
  • Scripting in Python, Bash, or similar
  • CI/CD experience (GitLab CI, GitHub Actions, Jenkins, Codefresh, or similar)
  • Experience working in a PCI DSS or SOC 2 environment, including producing evidence for technical controls
  • Clear written communication with both technical and non-technical audiences

Skills

Required:GCP and AWS securityContainer and vulnerability managementWAF and OWASP Core Rule SetPCI DSS / SOC 2 complianceCI/CD

Benefits

  • Mexican Base Monthly Salary MX$75K – MX$85K per month • Offers Equity
Last updated Sep 24, 2026. Interested? Apply on the company site.

About Peek

Discover a new adventure with Peek.

Whether you're a local or planning your next trip, Peek is full of incredible experiences.

TravelExperiencesToursActivitiesBooking
Company profileWebsite

More open roles at Peek