Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this DevSecOps Engineer role.
Rezi rewrites your resume against Yardstik's job description. Free.
Tailor your resume to this DevSecOps Engineer role.
Rezi rewrites your resume against Yardstik's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the DevSecOps Engineer posting at Yardstik — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the DevSecOps Engineer posting at Yardstik — free, in seconds.
About the Role
Yardstik is seeking a SecOps Engineer to own and advance the security posture of its platform and infrastructure. This role involves identifying, mitigating, and preventing security risks across cloud environments, applications, and data systems, working alongside engineering and operations teams. The position focuses on protecting systems, data, and customers through hands-on security engineering, cloud hardening, threat detection, incident response, and compliance enablement while maintaining operational reliability. This is an opportunity to join an early-stage company and contribute to its growth.
Responsibilities
- Own Yardstik's security posture across cloud infrastructure and applications
- Detect, investigate, and respond to security incidents
- Harden cloud environments through least-privilege IAM, network segmentation, etc.
- Manage vulnerability scanners, SIEM, endpoint protection, and intrusion detection tools
- Conduct threat modeling, vulnerability assessments, and penetration testing
- Serve as a security SME for the Technology organization, advising engineering teams on secure architecture, configurations, and operational practices
- Manage and harden AWS cloud infrastructure using Terraform and IaC, with a focus on security controls, audit logging, and compliance
- Build and maintain security monitoring, alerting, and detection pipelines using SIEM tools, log aggregation, and anomaly detection
- Perform vulnerability management: scanning, triaging, prioritizing, tracking remediation, and validating fixes
- Design and enforce network security controls including VPCs, security groups, WAF rules, and DDoS mitigation strategies
- Automate security workflows, compliance checks, and operational tasks through scripting (Python, Ruby, Bash)
- Respond to and lead security incident triage, including on-call rotations, with a focus on reducing MTTD and MTTR
- Evaluate and implement new security tools, technologies, and processes
- Collaborate with engineering to integrate security requirements into application design and infrastructure changes
Requirements
- Cloud-native environments (AWS preferred)
- SIEM management, log analysis, alert tuning, and incident response
- Infrastructure as Code (Terraform, CloudFormation)
- Vulnerability management: scanning, triage, remediation tracking, and reporting
- Security scanning and assessment tools (Snyk, SonarQube, ZAP, Burp Suite, or similar)
- Networking fundamentals (VPC, VPN, DNS, TLS) and web security (WAF, CDN, OWASP Top 10)
- Monitoring and observability platforms (DataDog, Splunk, or similar) with security focus
- Container security: image scanning, runtime security, and orchestration platforms (Kubernetes, EKS, ECS)
- Proficient with scripting languages for security automation (Python, Ruby, Bash)
- On-call and incident response processes, including security-specific triage, containment, and post-mortems
- Strong Linux systems administration with security hardening experience (CIS)
- Deep experience with AWS security services: IAM, GuardDuty, Security Hub, CloudTrail, Config, KMS
- Expertise with IAM design principles: least-privilege, RBAC/ABAC, service control policies, and cross-account access patterns
- Experience with identity and access management: SSO, OAuth/OIDC, SAML, and directory services
- Familiarity with secrets management platforms (AWS Secrets Manager, HashiCorp Vault, or similar)
- Experience with compliance frameworks (SOC 2, GDPR, or similar) and translating requirements into enforceable technical controls
- Understanding of threat modeling methodologies (STRIDE, DREAD, attack trees) and vulnerability management lifecycle
- Git-based source control proficiency and familiarity with GitOps methodologies
- Experience with cloud infrastructure automation and configuration management
- Security certifications such as AWS Security Specialty, CompTIA Security+, OSCP, CEH, CISSP, or similar
- Familiarity with supply chain security practices (SBOM generation, dependency pinning, signed artifacts)
- This role is not eligible for visa sponsorship.
Skills
- Security Engineering
- Cloud Hardening
- Threat Detection
- Incident Response
- Compliance Enablement
- IAM
- Network Segmentation
- Vulnerability Management
- SIEM
- Endpoint Protection
- Intrusion Detection
- Threat Modeling
- Vulnerability Assessment
- Penetration Testing
- Secure Architecture
- Secure Configurations
- Operational Practices
- AWS
- Terraform
- Infrastructure as Code (IaC)
- Security Controls
- Audit Logging
- Monitoring
- Alerting
- Detection Pipelines
- Log Aggregation
- Anomaly Detection
- VPC
- WAF
- DDoS Mitigation
- Python
- Ruby
- Bash
- MTTD Reduction
- MTTR Reduction
- Linux Systems Administration
- CIS Benchmarks
- GuardDuty
- Security Hub
- CloudTrail
- Config
- KMS
- RBAC/ABAC
- Service Control Policies
- Cross-Account Access
- SSO
- OAuth/OIDC
- SAML
- Directory Services
- AWS Secrets Manager
- HashiCorp Vault
- SOC 2
- GDPR
- STRIDE
- DREAD
- Attack Trees
- Git
- GitOps
- AWS Security Specialty
- CompTIA Security+
- OSCP
- CEH
- CISSP
- SBOM Generation
- Dependency Pinning
- Signed Artifacts
Location
- Minneapolis, MN
Work Type
- Full-time
Experience Level
- Experienced engineer
Salary/Compensations
- $120,000 - $165,000
Benefits
- Company Health Insurance Plan
- 401k Retirement Plan
- Health Savings Account
- Liberal Vacation Policy
- Opportunity to accelerate your career
About the Company
- Yardstik is a start-up software company with a mission of building trust and safety into the Internet Economy.
- The world of background screening, certification, and training has lacked innovation and we’re here to change that for our customers.
- Our enterprise-class technology allows us to provide a right-fit solution for our customers realistic for any platform, in any industry.
- Join us in our efforts to protect organizations and their people.
- We are honored to have recently been named a MSPBJ Best Place to Work for the sixth year in a row and named to Newsweek’s America’s Greatest Startup Workplaces.
- Come be part of our amazing culture and join an environment where you can see and feel the impact of your work every day.
Equal Opportunity
- Yardstik is an Equal Opportunity Employer.
- We’re committed to building a team based on talent, qualifications, and merit, welcoming all applicants without discrimination.