DevSecOps Engineer

📋 Job Overview

Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors.

🏢 About Alvys

Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar.

🎯 The Role

As a DevSecOps Engineer at Alvys, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors.

✅ Key Responsibilities

• Design and deliver infrastructure changes that strengthen our cloud security posture, including network isolation and identity-based access.
• Make these changes through infrastructure as code, plan rollouts that avoid customer downtime, and work with service owners to update the applications that depend on them.
• Build secure defaults into our infrastructure modules so new resources start out compliant.
• Help run our vulnerability management program, driving remediation within defined SLAs.
• Extend our existing security scanning with AI-assisted security testing, such as automated security code review and AI-driven penetration testing.
• Tune and improve the automation we already use to process security findings.
• Manage our third-party penetration tests from start to finish: scoping and targeting, test environments and accounts, vendor coordination, findings intake, and retesting.
• Help mature our internal, AI-assisted penetration testing tool into a dependable part of the security program, including deployment and scheduled runs.
• Deploy and operate internal applications in Azure, with identity, secrets, networking, and backups set up correctly from day one.
• Build telemetry pipelines (OpenTelemetry into Azure Monitor) for our AI and internal tools, with dashboards and alerts that surface anomalous activity.
• Partner with DevOps, engineering teams, and IT & Security to plan and prioritize work.
• Write clear runbooks and documentation, and produce evidence for our SOC 2 program.

📌 Required Qualifications

• Fluent in English, spoken and written.
• 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
• Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management.
• Production experience with infrastructure as code, preferably Terraform.
• Experience building and maintaining CI/CD pipelines.
• Working knowledge of containers and Kubernetes.
• Scripting skills in Python, PowerShell, or Bash.
• Understanding of common security risks in cloud and web applications, and how to fix them.
• Ability to explain technical risk clearly to engineers and non-engineers.

⭐ Desirable Experience

• Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities.
• Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing.
• Experience coordinating penetration tests or working with external security firms.
• Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus).
• Familiarity with SOC 2, ISO 27001, or CIS Benchmarks.
• Interest in AI tooling and how to deploy and monitor it safely.
• Security certifications such as AZ-500, Security+, or similar are a plus.
• Background in logistics or transportation is a bonus.

🎁 Benefits

Alvys is an equal opportunity employer and as such, we do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other characteristic protected by applicable laws. We are dedicated to growing a diverse team of highly talented people. We’re dedicated to building a workplace where we give each other the strategies, support, and space we each need to thrive—believing in and bringing out the best of everyone.

🛂 Visa & Eligibility

If you require any accommodations during the recruitment process, whether it be alternate forms of material, accessible meeting rooms, etc., please let us know and we will work with you to meet your needs.