[Hiring] Senior DevSecOps Engineer @NoFraud

Role Description

We're hiring a Senior DevSecOps Engineer to own the security posture of a production platform that processes millions of real-time transactions for thousands of merchants. You'll report to the Director of DevOps & SecOps and work alongside a small, high-trust infrastructure team.

This is a senior individual contributor role with real scope. You'll drive our PCI DSS 4.0 program end to end, including:

• Evidence collection
• Architectural decisions for evidence collection
• Ownership of SOC 2 continuous monitoring
• Deciding how security is enforced in CI/CD pipelines
• Managing payment data security in a fraud-prevention context

You will:

• Work with a stack primarily on AWS, heavily Terraform-managed
• Manage workloads across a mix of compute services
• Oversee a container orchestration migration
• Run multiple CI/CD systems and centralized secrets management
• Implement modern observability and security monitoring
• Contribute to Infrastructure-as-Code practices

Qualifications

• Six or more years securing production cloud environments
• Fluency in Terraform and AWS
• Proficiency in Python and Bash
• Experience leading at least one compliance implementation (PCI, SOC 2, HITRUST, FedRAMP)
• Strong communication skills for interacting with auditors, leadership, and engineers
• Experience in payments, fraud prevention, or regulated-data domains is a plus

Requirements

• Ability to think critically about the engineering relationship
• Experience with compliance controls that reduce risk
• Willingness to collaborate and approach problems as a team

Benefits

• High-performing team passionate about fraud prevention
• Community driven by core values: Integrity, Pride, Humility, and Impact

Company Description

Wyllo is a CX-first, end-to-end risk intelligence platform that helps ecommerce merchants manage fraud, policy abuse, and customer experience across the entire commerce lifecycle.