Sr. DevOps Engineer

Sr. Dev Ops Engineer (Copy)

Remote
• Full-time

Wyllo is a CX‑first, end‑to‑end risk intelligence platform that helps ecommerce merchants manage fraud, policy abuse, and customer experience across the entire commerce lifecycle. By combining identity signals with behavioral intelligence, Wyllo enables merchants to better understand shopper intent and make smarter decisions across checkout, returns, refunds, and customer support. Wyllo works with leading ecommerce brands and integrates directly into the platforms where merchants manage orders and customer interactions.

Learn more at www.wyllo.ai
.

We’re hiring a Senior Dev Sec Ops  Engineer to own the security posture of a production platform that processes millions of real‑time transactions for thousands of merchants. You’ll report to the Director of Dev Ops & Sec Ops and work alongside a small, high‑trust infrastructure team.

This is a senior individual contributor role with real scope. You’ll drive our PCI DSS 4.0 program end to end—defining what evidence is needed, collecting it, and making architectural decisions that influence evidence collection. You’ll own our SOC 2 continuous monitoring, decide how security is enforced in our CI/CD pipelines, and ensure developers can move quickly without bypassing controls. Because we handle payment data in a fraud‑prevention context, the security work here has a short path to business risk—weak controls jeopardize customer trust.

Our stack is primarily AWS, heavily Terraform‑managed, with workloads running across a mix of compute services and a container orchestration migration underway. We run multiple CI/CD systems, centralized secrets management, and modern observability and security monitoring across the platform. We expect the person in this role to bring a point of view on what we should standardize on next and to evaluate security tooling for this environment.

You’ll own the full container security architecture, determine build‑time scanning, protect workloads at runtime, and push compliance automation until evidence is a byproduct of how our systems run, not a quarterly project. You’ll also be the primary voice in how we interpret and meet PCI DSS 4.0’s newer requirements that demand engineering judgment, not just checkbox compliance.

Six or more years securing production cloud environments, with a trajectory that shows growing ownership and harder problems. Fluency in Terraform and AWS, with IAM policy decisions that come from experience, not from re‑reading the docs. Strong Python and Bash scripting skills that enable you to automate manual processes before they become repetitive. Leadership of at least one compliance implementation (PCI, SOC 2, HITRUST, FedRAMP) and insight into which controls actually reduced risk versus those that existed only to satisfy auditors.

We value how you think about the engineering relationship—security people who treat developers as adversaries do not fit here. Good communication is essential; you’ll spend meaningful time with auditors, leadership, and engineers who don’t think about security full‑time and must move between audiences seamlessly. Experience in payments, fraud prevention, or any regulated‑data domain is a plus. Certifications are not required; we evaluate on what you’ve built and how you reason about trade‑offs.

We’re a high‑performing team passionate about fraud and a community driven by values that shape everything we do. We seek passionate and dedicated individuals who align with our core principles:
Integrity, Pride, Humility, and Impact.

• Integrity: We do the right thing, even when it’s tough, and even if no one sees it. We always consider the customer’s best interest in every decision we make.
• Pride: We know that the work we do is important, and we take great pride in doing it well. We show up every day with the best intentions, ready to deliver superb outcomes for our team, our customers, and ourselves.
• Humility: We leave our egos at the door, approaching problems as a team, with openness and collaboration. We’re willing to be wrong in order to get things right.
• Impact: We are results‑oriented,…