DevOps Engineer – Cloud Platform Security

About the role

H2O.ai is looking for a DevOps Engineer to join its Cloud Platform team in Sri Lanka. The role focuses on scaling vulnerability management and security compliance operations for highly regulated enterprise customers, including financial institutions and government agencies.

Key responsibilities

• Own and lead analysis and triage of vulnerability scan results from multiple security tools, assessing actual risk and exploitability.
• Collaborate with engineering teams to evaluate remediation options, coordinate timely fixes, and implement patches.
• Remediate vulnerabilities hands‑on by upgrading dependencies, rebuilding container images, and shipping patches.
• Support compliance requirements for FedRAMP, SOC2, and banking regulations through timely remediation.
• Develop and maintain security tooling to centralize vulnerability management expertise.

Required profile

• Proven experience in cloud‑native environments and containerized platforms.
• Strong understanding of vulnerability assessment, analysis, and remediation processes.
• Ability to work cross‑functionally with engineering teams to drive security fixes.
• Familiarity with compliance frameworks such as FedRAMP and SOC2.
• Proactive attitude with a focus on delivering secure, reliable solutions.

Required skills