DevSecOps Engineer

About the role

Banyan Software is the best permanent home for software businesses that serve specialized industries, their employees, and their customers. With a buy-grow-and-hold-for-life approach and a permanent capital base, Banyan acquires and grows companies worldwide, honoring founder legacies and helping portfolio companies modernize through shared AI expertise and operational discipline. Founded in 2016, Banyan operates more than 120 portfolio companies across North and South America, Europe, and APAC, and has appeared on the Inc. 5000 list for six consecutive years. The Banyan Software Foundation, endowed with $100 million in Banyan stock, leverages technology to build a greener and more equitable world.

About 10x People:

At 10x People, we build cloud-based numbering software that helps telecom carriers, MVNOs, and CPaaS providers order, port, and manage phone numbers. Founded in 2013 and based in Littleton, Colorado, we serve customers across the U.S. and Canada, and our platform is part of their daily operations. We joined Banyan in September 2026, giving us a permanent home and the resources to keep growing.

The Role:

We're looking for an engineer who enjoys both building infrastructure and securing it. You'll own key parts of our AWS and Kubernetes platform while leading our day-to-day security and compliance work, with roughly half of your time on security.

It's a broad role with real ownership, suited to someone who likes variety and wants to shape how a growing company runs. You'll have a direct impact on how we build and ship.

Platform and DevOps

- Kubernetes on AWS: Build, operate, and improve our Kubernetes (EKS) infrastructure on AWS.

- EKS Migrations: Lead and execute workload migrations onto EKS.

- CI/CD with Security Built In: Maintain and improve CI/CD pipelines, building security checks directly into them.

- Automation: Automate wherever you can. If you do something manually twice, script it.

Security and Compliance

- SOC 2 Program: Run our SOC 2 program in Vanta: tracking controls, closing gaps, and keeping us audit-ready.

- Vulnerability Management: Own vulnerability management. Triage container CVEs from ECR scans and SAST/DAST findings, then fix them yourself or route them to the right team through GitHub.

- Monitoring and Response: Monitor and respond to AWS security alerts (GuardDuty, Security Hub) and externally reported issues.

- Access and Policy: Manage internal access control and maintain policies for secure development and data handling.

- Design and Threat Modeling: Join design reviews and threat modeling sessions with engineering.

- Security Awareness: Coordinate penetration tests, run tabletop exercises, and help keep the org security-aware.

Qualifications for success:

- 2+ years of experience in DevOps, platform, SRE, or security engineering.

- Hands-on production experience with Kubernetes, preferred.