Senior DevSecOps Engineer

Own infrastructure security for a compliance-driven SaaS environment (SOC 2 / CSA-aligned). Manage CSPM-driven posture, continuous vulnerability assessment, remediation, and security incident response across AWS. Harden AWS infrastructure to security benchmarks, enforce security SOPs, and maintain audit evidence for SOC 2 Type II, ISO 27017, and CSA CCM. Support BCP/DR drills and recovery objectives (RTO/RPO) while collaborating with engineering and customer success.