Join Atmail and Help Shape the Future of Continuous Compliance
At Atmail, we’re looking for a DevSecOps Engineer to join our Cloud Platforms team and help bridge the gap between security policy and real-world implementation.
This is an opportunity to work at the intersection of security engineering, compliance automation, cloud infrastructure, and DevSecOps, building scalable tooling that continuously validates security controls and compliance requirements across modern environments.
If you enjoy automating security processes, building compliance-as-code frameworks, and improving cloud security visibility through engineering, we’d love to hear from you.
What You’ll Be Doing:
- Design and develop automated compliance checks across infrastructure, applications, and operational processes
- Build monitoring dashboards and reporting pipelines that provide real-time compliance visibility
- Translate security frameworks and policies into version-controlled automated test suites
- Integrate compliance and security validation into CI/CD pipelines and infrastructure-as-code workflows
- Work closely with engineering and operations teams to drive continuous compliance practices
- Support customer security audits and compliance enquiries through automated evidence collection
- Identify compliance gaps, create remediation actions, and validate fixes through re-testing
- Research and recommend emerging compliance automation frameworks and tooling
What We’re Looking For
Mandatory:
5+ years’ experience in IT, including hands-on experience in:
- Security engineering
- Compliance automation
- Monitoring or testing tooling
Strong development skills in:
- Python
- Bash scripting
Experience with:
- CI/CD pipelines
- Infrastructure-as-Code tools (Terraform, CloudFormation, etc.)
- AWS and/or Google Cloud Platform
Knowledge of compliance frameworks such as:
- ISO 27001
- SOC 2
- CIS Benchmarks
Experience with compliance automation platforms like:
- Drata
- Vanta
- CloudCheckr
Desirable:
- Policy-as-code or compliance-as-code frameworks:
- Open Policy Agent (OPA)
- Chef InSpec
- Kyverno
- OSCAL
- DevSecOps practices and automated security validation
Familiarity with:
- OWASP Top 10
- OWASP ASVS
- Threat modelling
Security certifications such as:
- CISSP
- CCSP
- CCSK
- GIAC
- AWS Security Specialty
Why Join Atmail?
- Fully flexible remote working environment
- Work on meaningful security engineering initiatives with real impact
- Be part of a culture focused on engineering excellence and continuous improvement
- Opportunity to shape modern compliance automation practices at scale
- Collaborate with experienced cloud and security professionals
Sign in
To continue your applicationor continue with email
By continuing you agree to our Terms & Privacy Policy.
