SecOps Engineer

Maven AGI

. Own the security posture of our infrastructure, including Kubernetes clusters: admission control, network policy, runtime threat detection, and workload isolation .

Posted 5/5/2026full-timeBoston • Massachusetts • 🇺🇸 United StatesMid-LevelSenior💰 $165,000 - $190,000 per yearWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoGoogle Cloud PlatformKubernetesPythonTerraformTypeScript

About the role

Key responsibilities & impact

Own the security posture of our infrastructure, including Kubernetes clusters: admission control, network policy, runtime threat detection, and workload isolation
Harden CI/CD pipelines against supply chain threats: SAST/DAST, SBOM generation, signed artifacts, and dependency scanning across a large-scale monorepo
Design, implement, and maintain security infrastructure across cloud providers (Azure, AWS, GCP) using infrastructure-as-code (Pulumi, Terraform, Helm)
Build and operate detection and response capabilities (SIEM, audit logging, alerting) and lead incident response end-to-end: from triage to forensics to postmortem
Support compliance programs (SOC 2, HIPAA, ISO): evidence automation, control mapping, audit readiness, and customer security reviews
Manage identity, secrets, and access controls across cloud, SaaS, and Kubernetes, enforcing least privilege and short-lived credentials by default
Address AI-specific risks (model access, prompt injection, data exfiltration) as we expand our agent platform
Evaluate and adopt new tooling to reduce manual toil and scale security coverage as the company grows

Requirements

What you’ll need

3-7 years of professional Security Engineering, DevOps, or SRE experience
Strong infrastructure-as-code and policy-as-code skills
Hands-on experience securing CI/CD systems (GitHub Actions, ArgoCD): supply chain controls, secret scanning, signed builds
Deep experience with detection and response tooling (SIEM, EDR, audit logging) and leading incidents end-to-end
Proficiency in at least one scripting/programming language (Python, Go, TypeScript, or Bash) for automation and tooling
Solid understanding of cloud security across IaaS providers: IAM, networking, DNS, TLS, KMS, and identity federation
Experience securing Kubernetes in production (AKS, EKS, or GKE): RBAC, network policy, admission control, runtime security
Working knowledge of at least one compliance framework (SOC 2, HIPAA, ISO 27001, GDPR) and the engineering work behind audit readiness
Strong communication and cross-team collaboration skills: security at a startup is a partnership, not a gate
Organized, detail-oriented, comfortable operating in a ticketing environment
Thrives in fast-paced startup environments

Benefits

Comp & perks

Offers Equity
Offers Bonus

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security engineeringDevOpsSREinfrastructure-as-codepolicy-as-codeCI/CD securitydetection and responsescriptingcloud securityKubernetes security

Soft Skills

communicationcross-team collaborationorganizeddetail-orientedadaptability

Certifications

SOC 2HIPAAISO 27001GDPR