HC
Solutions
About the Role
🌟 Role Summary: This is not a traditional compliance or GRC role. We're looking for a hands-on security engineer with a strong DevOps, Platform Engineering, SRE, or Cloud Security background who can secure production systems, improve our security posture, and implement controls directly within our cloud environment.
You should be comfortable:
- Operating AWS environments
- Working with Kubernetes (EKS)
- Writing and reviewing Infrastructure as Code
- Owning CI/CD pipelines
- Implementing security controls in production
- Working closely with DevOps and Engineering teams
-Translating compliance requirements into technical solutions
If your experience is primarily policy, governance, audit coordination, or compliance management without deep technical ownership of cloud infrastructure, this role is unlikely to be a fit.
💡 What You’ll Work On
Cloud & Platform Security
- Secure and harden AWS production environments
- Improve security posture across EKS/Kubernetes workloads
- Implement IAM, secrets management, workload identity, and least-privilege controls
- Deploy and manage AWS-native security services including GuardDuty, Security Hub, CloudTrail, Inspector, and WAF
- Define security baselines and infrastructure standards
- Support disaster recovery and business continuity security requirements
Infrastructure as Code & DevSecOps
- Design and maintain security controls within Terraform-managed infrastructure
- Embed security into CI/CD pipelines
- Implement automated security checks and policy-as-code controls
- Partner with engineering to improve secure software delivery practices
- Support container and Kubernetes security initiatives
Security Operations
- Own vulnerability management and remediation workflows
- Improve logging, monitoring, and detection capabilities
- Lead incident response efforts and post-incident reviews
- Coordinate penetration testing and remediation activities
- Develop security playbooks and operational procedures\
Compliance & Audit Readiness
- Implement and maintain technical controls required for: SOC 2, ISO 27001, PCI DSS, NIST-based frameworks
- Produce technical evidence demonstrating effective control operation
- Work with auditors, assessors, and external security partners
- Support future government-oriented compliance initiatives
Requirements
🔧 Must‑Have Qualifications
5+ years of experience in Cyber Security, DevSecOps, Platform Engineering, Site Reliability Engineering (SRE), or Cloud Security
Strong hands-on experience operating AWS environments
Experience working with Kubernetes (EKS preferred)
Production experience with Infrastructure as Code (Terraform preferred)
Experience building, maintaining, or securing CI/CD pipelines
Experience implementing security controls in cloud-native environments
Strong understanding of: IAM, Vulnerability Management, Security Monitoring, Incident Responseand Cloud Security Architecture
Experience supporting compliance programs such as: SOC 2, ISO 27001, PCI DSS, NIST-based frameworks
Excellent written and spoken English
Ability to operate independently and take ownership of security outcomes
Nice to have:
AWS Security Specialty, CISSP, CCSP, CKS, CKA, or related certifications
Experience hardening Kubernetes workloads
Experience with EKS security
Experience with Security Hub, GuardDuty, Inspector, Datadog, SentinelOne, Wiz, or similar platforms
Experience implementing policy-as-code solutions (OPA, Kyverno, Checkov, Terraform Compliance, etc.)
Experience with FedRAMP, CMMC, NIST 800-53, SSP development, or POA&M management
SaaS startup or scale-up experience
Experience as a DevOps Engineer, Platform Engineer, Cloud Engineer, SRE, DevSecOps Engineer, or Cloud Security Engineer
About the Company
🔍 Recruitment Process:
- Initial call with Recruiting Agency HC Solutions
- Technical panel interview (Senior Engineer + Tech Lead)
- Interview with AI Labs team
- Final interview with VP Engineering & CTO
🌍 About the Client
Company: FieldFlo, USA.FieldFlo is a fast-growing, AI-native SaaS platform serving the construction, demolition, and environmental services industries. Our platform supports compliance, safety, workforce management, training, and operational excellence for field teams across the United States. As our customer base grows, including organizations supporting U.S. federal projects, we're investing heavily in cloud security, platform hardening, and compliance readiness. We're looking for our first dedicated DevOps Sec Lead to own and execute this initiative.