Upwave
DevOps Security Contractor
Remote
Contractor
#Product
#DevOps
#Security
#AWS
#Infrastructure Security
#IAM
#Incident Response
#SOC 2
#Cloud Security
Upwave is looking for a DevOps Security Contractor
ContractorSeniorRemoteUnited StatesProductDevOpsSecurityAWSInfrastructure SecurityIAMIncident ResponseSOC 2Cloud SecurityEnglishRemote workFlexible hoursAsync
Upwave is a profitable, growth-stage measurement company that helps the world’s leading advertisers, agencies, and media partners bring science to upper-funnel brand campaigns through its AI-driven platform. We are looking for a senior DevOps Security Contractor to deliver high-impact guidance on a part-time basis.
Responsibilities
- Deliver ongoing DevOps and security guidance to engineering and leadership teams.
- Review existing cloud infrastructure, CI/CD pipelines, and access controls, then recommend targeted improvements.
- Perform periodic security audits and risk assessments.
- Guide the implementation of best practices in cloud security, IAM, and data protection.
- Support incident response efforts and help refine our incident response procedures.
- Strengthen deployment pipelines and overall system architecture from a security perspective.
- Assist with the selection and rollout of security tooling for monitoring, alerting, and vulnerability scanning.
- Ensure alignment with SOC 2 and other relevant compliance standards.
- Collaborate with engineering on secure system design for new initiatives.
- Document recommendations and maintain lightweight security playbooks.
Must-haves
- 15+ years of experience in DevOps, cloud infrastructure, or security engineering.
- Strong hands-on experience with AWS.
- Deep knowledge of infrastructure security and hardening, identity and access management, CI/CD security, and incident response and monitoring.
- Experience supporting SOC 2 or similar compliance frameworks.
- Ability to work independently in a low-hour, high-impact advisory role.
- Excellent communication skills with the ability to translate technical risk into clear, actionable steps.
- Fluency in English.
Nice-to-haves
- Prior experience advising early- or growth-stage technology companies.
Benefits
- Fully remote work arrangement.
- Flexible, async-friendly schedule with occasional scheduled check-ins.
- 2–3 hours of overlap with standard Pacific Time working hours required.
Copy Permalink
