DevSecOps Engineer

The posting, as Alvys wrote it

About the Role

Join Alvys, an early-stage company transforming the $800B US freight industry. As a DevSecOps Engineer, you'll help protect our platform and the customer data it holds. You'll close cloud security gaps, build security checks into how we ship software, run our penetration testing program, and stand up the infrastructure behind our internal security, IT, and AI tools. This role combines hands-on infrastructure work with coordination across DevOps, engineering teams, IT & Security, and outside security vendors.

Industry Insight

Freight companies run their business on Alvys: loads, drivers, carriers, payments, and financial records. As more of the industry moves to modern software, customers expect that data to be protected like any other business-critical system. Security is part of how we earn and keep their trust.

About Alvys

Alvys is building a multi-tenant SaaS platform that powers modern transportation operations. We combine deep industry knowledge with strong technical execution to bring clarity, automation, and reliability to one of the world's most essential industries. Security is a shared responsibility at Alvys, and this role helps every team meet that bar.

Our Principles

Engineering Principles

• Build for Real-World Impact. Our users rely on Alvys to solve real problems, not abstract ones. Every security fix should reduce real risk to our platform and the people moving freight every day, not just clear a scanner finding.
• Extreme Ownership and Empowerment. Ownership extends beyond building. It means being accountable for quality, reliability, and customer impact. If it's in production, it's yours: bugs, uptime, and results.
• Technology Debt is Strategic, Not Accidental. Technical debt is a strategic choice, not an oversight. We incur it deliberately when it unlocks speed, learning, or market advantage. Our architecture remains clean, maintainable, and scalable as we grow.
• Simplicity Scales; Complexity Costs. Logistics is inherently complex, but our technology shouldn't be. We prioritize simplicity in our architecture, leveraging modularity and well-defined service boundaries to reduce cognitive load.
• Radical Transparency. We democratize data and make it accessible across all functions to drive alignment and decision-making. Transparency also means feedback. We systematize constructive feedback loops to ensure growth.

Engineering Culture

• Move Fast, Learn Fast. Speed is our advantage, but we move fast intentionally. We bias for action, assume positive intent, and treat every mistake as a learning opportunity.
• Own the Outcome. Every engineer owns outcomes, not tickets. We take responsibility end-to-end, identifying problems, delivering solutions, and ensuring they last.
• Partner, Don't Gatekeep. Security works best when it's built with the teams who own the systems. We share context with DevOps and engineering teams, explain the risk behind each ask, and make the secure path the easy one.
• Pr

[…]
Stack

• Cloud: Azure (AKS, App Service, Azure Functions, Storage, Key Vault, Cosmos DB, VNets, Microsoft Entra ID)
• Infrastructure as code: Terraform
• CI/CD: GitHub Actions and Azure DevOps pipelines
• Containers: Docker, Kubernetes, Azure Container Registry
• Observability: Azure Monitor, App Insights, Log Analytics, OpenTelemetry, Grafana
• Security: Aikido, Cloudflare
• AI tooling: Cursor, Claude, Claude Platform (managed agents), Grokbot
• Application code: .NET/C#, TypeScript, Angular, React

Minimum Qualifications

• Fluent in English, spoken and written.
• 3+ years of professional experience in DevOps, cloud infrastructure, platform engineering, or security engineering.
• Hands-on experience with at least one major cloud provider (Azure, AWS, or GCP), including networking, identity and access management, and secrets management.
• Production experience with infrastructure as code, preferably Terraform.
• Experience building and maintaining CI/CD pipelines.
• Working knowledge of containers and Kubernetes.
• Scripting skills in Python, PowerShell, or Bash.
• Understanding of common security risks in cloud and web applications, and how to fix them.
• Ability to explain technical risk clearly to engineers and non-engineers.

Preferred Qualifications

• Experience with Azure specifically, including private endpoints, VNet integration, and Entra ID managed identities.
• Experience with application security testing (SCA, SAST, DAST), and interest in applying AI to security testing.
• Experience coordinating penetration tests or working with external security firms.
• Experience with OpenTelemetry, Azure Monitor, or similar observability tools, including writing alert queries (KQL is a plus).
• Familiarity with SOC 2, ISO 27001, or CIS Benchmarks.
• Interest in AI tooling and how to deploy and monitor it safely.
• Security certifications such as AZ-500, Security+, or similar are a plus.
• Background in logistics or transportation is a bonus.