DevSecOps Engineer

📋 Job Overview

You'll work at the intersection of Site Reliability Engineering and Cloud Security, keeping our platform highly available, scalable and secure by design. We treat infrastructure as software and believe security should enable engineering velocity, not block it.

🏢 About DISQO

DISQO is a leading provider of advertising intelligence, measuring brand and performance outcomes across every media channel to power data-driven marketing decisions. Trusted by 500+ of the world’s largest brands and 150+ agency and media partners, and recognized by Inc., Deloitte, Ad Age, Digiday, Forbes, and Cynopsis, DISQO is redefining the power of measurement in advertising.

🎯 The Role

Joining DISQO Nation means being part of a team that moves fast, thinks boldly, and is passionate about solving meaningful problems. At DISQO, our day-to-day roles are deeply integrated with AI. We actively empower every team member with cutting-edge AI tools to automate repetitive tasks and streamline workflows, allowing you to focus your energy on high-impact, strategic, and creative problem-solving. Innovation isn't just something we talk about, it's how we operate. We challenge assumptions, embrace new ideas, and continuously push ourselves to build better solutions for our customers and each other.

✅ Key Responsibilities

• Infrastructure as code: Build and run secure, multi-account AWS infrastructure with Terraform and GitOps.
• Kubernetes: Operate and harden Amazon EKS workloads and the container platform.
• Service reliability: Define, track and enforce SLOs, SLIs and error budgets across our microservices, including services that depend on LLMs (fallbacks, latency and cost budgets).
• Observability: Run and improve our observability stack on Grafana, Newrelic
• Toil reduction: Write automation in Python or Go. Agents do much of the authoring; you own the design, testing and review.
• Developer support: Be the go-to partner for engineering teams on infrastructure, deployments and environments. Help them debug build, pipeline and runtime issues, and turn recurring requests into self-service.
• Infrastructure enablement: Help teams provision and change infrastructure through reviewed Terraform and GitOps workflows, and support new services from first deploy to production readiness.
• CI/CD & release: Maintain and improve build and deployment pipelines, release processes and environment management so teams can ship quickly and safely.
• AWS security posture: Own IAM, KMS, Secrets Manager, GuardDuty, Security Hub, AWS Config, CloudTrail and Control Tower across our accounts.
• Zero trust & identity: Enforce least privilege and short-lived credentials for people, services and AI agents alike.
• Network defense: Design secure network boundaries, egress filtering and WAF rules that limit blast radius.
• Shift-left security: Embed SAST, SCA, container scanning and policy-as-code (OPA) into GitLab CI and ArgoCD without slowing teams down.
• Vulnerability management: Scale scanning, triage and code review to match the growing volume of AI-generated code.
• Secure by default: Partner with product teams in design reviews so new services follow secure architecture patterns.
• Detection & response: Build detections mapped to MITRE ATT&CK and respond to both reliability outages and security incidents as part of the on-call rotation.
• Internal agents: Build and operate agents, MCP servers and skills that automate SRE and security workflows.
• Agent identity & guardrails: Treat agents as non-human identities with scoped permissions, approval gates for high-risk actions (such as production changes and IAM edits) and full audit trails.
• AI supply chain: Vet and pin third-party

🎁 Benefits

Competitive