Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 22 days ago

DevSecOps Engineer

DISQO6 open roles

Pay
$180,000 – $195,000 a year
Where
Los Angeles, CA
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDevSecOps EngineerDISQO · Los Angeles, CA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on DISQO's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.8% of postings close within 7 days. Measured by our own scanner across the market. DISQO postings stay open a median of 1 days.

Share of postings closed within
  1. 1.9%1 day
  2. 3.9%3 days
  3. 9.8%7 days
  4. 15.6%14 days
  5. 33.9%30 days
This job: posted 22 days ago

DISQO median: 1 days open

The posting

DISQO is a leading provider of advertising intelligence, measuring brand and performance outcomes across every media channel to power data-driven marketing decisions. Trusted by 500+ of the world’s largest brands and 150+ agency and media partners, and recognized by Inc., Deloitte, Ad Age, Digiday, Forbes, and Cynopsis, DISQO is redefining the power of measurement in advertising.

Joining DISQO Nation means being part of a team that moves fast, thinks boldly, and is passionate about solving meaningful problems. At DISQO, our day-to-day roles are deeply integrated with AI. We actively empower every team member with cutting-edge AI tools to automate repetitive tasks and streamline workflows, allowing you to focus your energy on high-impact, strategic, and creative problem-solving. Innovation isn't just something we talk about, it's how we operate. We challenge assumptions, embrace new ideas, and continuously push ourselves to build better solutions for our customers and each other.

Our values guide how we work and win together. We believe in winning as one team, fostering a culture of collaboration, trust, and shared accountability. We pursue outsized impact by focusing on opportunities that drive meaningful results for our customers and our business. We champion the customer by putting their needs at the center of every decision and delivering solutions that create real value. And we are relentlessly all in, bringing energy, passion, and commitment to every challenge, every day.

If you're energized by high-growth environments, motivated by AI-enabled productivity, and excited by the opportunity to do impactful work alongside talented, driven teammates, you'll feel right at home at DISQO.

About the role:

You'll work at the intersection of Site Reliability Engineering and Cloud Security, keeping our platform highly available, scalable and secure by design. We treat infrastructure as software and believe security should enable engineering velocity, not block it.

You'll ship most infrastructure, automation and remediation work with AI coding agents. Your core job is to design the guardrails, reviews and tests that make that safe at scale, and to help build the internal agents that run a growing part of our reliability and security operations.

The skill we value most is judgment: knowing when an agent's output is wrong, unsafe or not ready for production, and building systems that catch it when you're not looking.

What you will do:

  • Infrastructure as code: Build and run secure, multi-account AWS infrastructure with Terraform and GitOps.
  • Kubernetes: Operate and harden Amazon EKS workloads and the container platform.
  • Service reliability: Define, track and enforce SLOs, SLIs and error budgets across our microservices, including services that depend on LLMs (fallbacks, latency and cost budgets).
  • Observability: Run and improve our observability stack on Grafana, Newrelic
  • Toil reduction: Write automation in Python or Go. Agents do much of the authoring; you own the design, testing and review.
  • Developer support: Be the go-to partner for engineering teams on infrastructure, deployments and environments. Help them debug build, pipeline and runtime issues, and turn recurring requests into self-service.
  • Infrastructure enablement: Help teams provision and change infrastructure through reviewed Terraform and GitOps workflows, and support new services from first deploy to production readiness.
  • CI/CD & release: Maintain and improve build and deployment pipelines, release processes and environment management so teams can ship quickly and safely.
  • AWS security posture: Own IAM, KMS, Secrets Manager, GuardDuty, Security Hub, AWS Config, CloudTrail and Control Tower across our accounts.
  • Zero trust & identity: Enforce least privilege and short-lived credentials for people, services and AI agents alike.
  • Network defense: Design secure network boundaries, egress filtering and WAF rules that limit blast radius.
  • Shift-left security: Embed SAST, SCA, container scanning and policy-as-code (OPA) into GitLab CI and ArgoCD without slowing teams down.
  • Vulnerability management: Scale scanning, triage and code review to match the growing volume of AI-generated code.
  • Secure by default: Partner with product teams in design reviews so new services follow secure architecture patterns.
  • Detection & response: Build detections mapped to MITRE ATT&CK and respond to both reliability outages and security incidents as part of the on-call rotation.
  • Internal agents: Build and operate agents, MCP servers and skills that automate SRE and security workflows.
  • Agent identity & guardrails: Treat agents as non-human identities with scoped permissions, approval gates for high-risk actions (such as production changes and IAM edits) and full audit trails.
  • AI supply chain: Vet and pin third-party models, MCP servers and agent plugins the same way we manage open-source dependencies.
  • Data protection for AI: Control what consumer and panel data can reach external model APIs, and set usage and cost limits.
  • Agent-ready operations: Write runbooks, alerts and blameless postmortems as structured, testable steps an agent can execute, with clear stop conditions.
  • Evaluation: Test and evaluate agents before they reach production, and monitor them once they do.
  • AI Native Platform (~50%): Building agents, paved paths and guardrails for platform engineering
  • Cloud Security (~30%): Owning AWS security posture, embedding security into CI/CD, and detection and response.
  • SRE & DevOps (~20%): Running reliable infrastructure, observability, and day-to-day developer and infrastructure support.

What you bring to the role:

  • Experience: 5+ years of hands-on experience in Site Reliability Engineering (SRE), DevOps, Cloud Engineering, or Cloud Security Engineering roles.
  • Cloud Expertise: Strong production expertise with AWS core services, networking, multi-account governance, and AWS-native security tooling (IAM, GuardDuty, Security Hub, KMS).
  • Infrastructure as Code: Advanced hands-on proficiency with Terraform, GitOps, and configuration management.
  • Containers & Kubernetes: In-depth knowledge of Docker and Kubernetes (EKS) administration, deployment, and container runtime security.
  • Coding & Scripting: Proven ability to write clean, modular automation code in Python or Go (not just configuring tools, but authoring custom automations, tooling, and integrations).
  • CI/CD Integration: Solid experience building, maintaining, and securing CI/CD pipelines (GitLab CI, ArgoCD, ArgoWorflows).
  • AI Tooling Adoption: Active, daily experience leveraging AI coding agents and development tools (Claude Code, Cursor, Copilot) to accelerate delivery and automate workflows.
  • Mindset: Strong collaboration, clear communication, and a philosophy that security empowers development velocity rather than acting as a blocker.

Preferred Qualifications:

  • Certifications: AWS Certified DevOps Engineer, AWS Certified Security - Specialty, CKA/CKS (Certified Kubernetes Administrator/Security Specialist), or CISSP.
  • SecOps / EDR Experience: Familiarity with endpoint security (CrowdStrike), modern SIEM/SOAR platforms, and vulnerability management workflows.
  • Compliance Frameworks: Familiarity with SOC 2 Type I/II, ISO 27001, GDPR, and CCPA compliance requirements in cloud environments.

#LI-MV1

At DISQO, we pride ourselves on having a positive, performance-oriented workplace that includes a flexible hybrid approach, competitive medical benefits, and an amazing vacation policy. Read more about our culture on Glassdoor.

You can learn more about what’s happening at DISQO by visiting the DISQO Company Blog.

Perks & Benefits:

·100% covered Medical/Dental/Vision for employee, competitive dependent coverage

·Stock options

·401K

·Generous PTO policy

·Team offsites, social events & happy hours

·Life Insurance

·Health FSA

·Catered lunch and fully stocked kitchen

·Paid Maternity/Paternity leave

·Disability Insurance

·Travel Assistance Program

·24/7 Counseling Services offered to Employees

Note: The benefits noted above are for full time US based employees only.

DISQO is an equal opportunity employer. Discovery, innovation, and growth are possible when we open ourselves to new possibilities, perspectives, and approaches. That’s why, at DISQO, we welcome, support, and empower individuals from diverse backgrounds. Exceptional teams are rooted in extraordinary people, each with a unique story and a compelling set of skills. DISQO does not discriminate against employees based on race, color, religion, sex, national origin, gender identity or expression, age, disability, pregnancy (including childbirth, breastfeeding, or related medical condition), genetic information, protected military or veteran status, sexual orientation, or any other characteristic protected by applicable federal, state or local laws.

*Recruiting firms that submit resumes to DISQO without first entering into a written contract will not be entitled to any compensation on candidates referred by that firm.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against DISQO's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on DISQO's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    DISQO's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.