---
title: 'Dev Sec Ops Engineer at Peek'
canonical: 'https://feeny.ai/job/dev-sec-ops-engineer-peek-mexico-7hkpdrw42vcv'
type: 'job'
last_seen: '2026-09-26'
---

# Dev Sec Ops Engineer at Peek

- **Company:** Peek
- **Location:** Mexico
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-09-22
- **Last confirmed live:** 2026-09-26
- **Apply:** https://jobs.ashbyhq.com/peek/128c57bf-bc8a-4e22-9a86-84b1422c7039

## Job description

Peek is the operating system powering the experiences industry - from museums and attractions to tours and activities. With over $7B in bookings, Peek’s AI-powered platform has helped thousands of merchants to increase revenues, save time, and deliver seamless guest experiences. Customers include MoMA, Whitney Museum, Seattle Aquarium, Bryant Park & Looping Group. The company has raised over $150 million from institutional investors Westcap, Goldman Sachs, and SpringCoast Partners. Learn more at [www.peek.com](http://www.peek.com).

As a remote-first company recognized by Forbes as one of America's Best Startup Employers and by Built In as a 2025 and 2026 Best Place to Work, we are a global team of "Peeksters" who "Obsess Over Our Customers," "Accomplish Big Things," "Collaborate With Purpose," and "Get Better Every Day.

We're looking for a hands-on DevSecOps Engineer to embed security into our infrastructure, CI/CD pipelines, and cloud environment. You'll own the technical controls and evidence that keep us PCI DSS 4.0 and SOC 2 Type II compliant, drive vulnerability remediation across our container and VM fleet, and build out the disaster recovery testing program. This is a role for someone who's comfortable moving between hands-on technical remediation, audit-facing documentation, and cross-functional work with engineering, IT, and procurement. Our team is 100% remote, however, we prefer candidates in the same time zones as the greater United States (UTC-10 to UTC-4).

We will occasionally require you to work outside of normal business hours on infrastructure upgrades and maintenance. We are committed to working with you to keep a healthy and balanced schedule.

## About the Team

We’re a small DevOps team supporting the whole Engineering organization, building applications on top of GCP and AWS. We own all aspects of the SDLC but strive to automate self-service wherever possible. Being a small team, we also practice SRE, continuously improving our observability and building with Infrastructure-as-Code. Security and compliance best practices are integral to our workflows, ensuring systems are secure by design and meet regulatory and organizational standards. Our team is remote but highly organized to meet the demand of a fast-paced environment. Our primary business language is English, and we emphasize strong communication skills.

## About You

You're a security-minded engineer who's as comfortable in a Kubernetes cluster or CI/CD pipeline as you are explaining a control to an auditor. You own remediation end to end, like automating away repetitive security work, and are energized by helping a growing company scale security without slowing the business down.

## What You'll Do

- Own technical security controls across GCP and AWS: least-privilege IAM and RBAC, WAF, container and image security, and secure CI/CD.
- Drive vulnerability remediation end to end: triage, prioritize, and automate fixes, partnering with the rest of the DevOps team on production rollout.
- Build automated scanning and remediation into our pipelines.
- Tune WAF policies and the OWASP Core Rule Set to protect public-facing applications without blocking legitimate traffic.
- Run PCI DSS vulnerability scanning, including quarterly external ASV scans, and drive remediation of findings.
- Contribute to incident response planning and exercises, and ensure backups and recovery processes meet security requirements for encryption, access, and integrity.
- Produce and automate evidence for technical controls, and keep our cloud environments connected to our compliance platform (Drata).
- Serve as technical expert for audits, customer security reviews, and vendor assessments involving sensitive data.

## Requirements

- 3+ years in DevSecOps, security engineering, cloud security, or a closely related role
- Hands-on experience securing GCP and/or AWS, including managed Kubernetes (GKE, EKS)
- Container and vulnerability management, including building automated remediation (tools such as Trivy, AWS Inspector, Amazon ECR scanning, GCP Artifact Analysis, ZAP)
- WAF configuration and OWASP Core Rule Set tuning (Cloud Armor, AWS WAF, Cloudflare, or similar)
- Least-privilege access management across cloud services (IAM, RBAC)
- Working Linux knowledge sufficient to remediate OS and package vulnerabilities in VMs and container images
- Scripting in Python, Bash, or similar
- CI/CD experience (GitLab CI, GitHub Actions, Jenkins, Codefresh, or similar)
- Experience working in a PCI DSS or SOC 2 environment, including producing evidence for technical controls
- Clear written communication with both technical and non-technical audiences

Nice to Haves

- Low-downtime patching approaches (rolling updates, blue/green, live patching such as kpatch or Livepatch)
- PCI ASV scanning with Tenable or a comparable platform
- Drata or a similar compliance automation platform
- Serverless platforms (Cloud Run, Cloud Functions, AWS Lambda)
- Cloud security posture tools such as ScoutSuite or Mondoo
- Contributing to third-party risk reviews involving PII
- Agentic or AI-assisted penetration testing
- Certifications such as OSCP, CISSP, CISM, or AWS/GCP Security Specialty

Peek Travel Inc. is an equal-opportunity employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, disability, or other legally protected status. If you are unable to apply due to incompatible assistive technology or a disability, please contact us at talent@peek.com.  We will make every effort to respond to your request for disability assistance as soon as possible.

## About Peek

## Company Overview
- **One-liner**: Peek is the operating system and marketplace for the experiences industry, providing booking software and a consumer marketplace for tours, activities, museums, and attractions.
- **Entity Type**: Private (Series D, last raised $70M in May 2026)
- **Headquarters**: San Francisco, California, United States
- **Founded**: 2011
- **Founders**: Ruzwana Bashir (CEO) and Oskar Bruening (CTO)

## Core Business
- **Primary industry**: Travel and leisure technology; experiences industry (tours, activities, attractions, museums)
- **Target customers**: B2B (experience operators, museums, theme parks, cultural institutions) and B2C (consumers booking activities)
- **Mission**: To empower operators to deliver extraordinary experiences and make travel planning enjoyable for consumers.

## Products & Services
- **Peek Platform (Software)**: A comprehensive SaaS operating system for experience providers, including reservation management, payments, marketing, reporting, reviews, and AI-powered tools. Powers over $7 billion in bookings.
- **Peek Marketplace**: A consumer-facing marketplace with over 300,000 things to do and 3 million verified reviews, allowing travelers to discover and book activities.
- **Peek Copilot**: An integrated AI platform that includes Dynamic Pricing (delivering 5–20% revenue growth for operators), fraud detection, data analysis, and hundreds of AI agents working behind the scenes.
- **Acquired Products**: ACME Ticketing (ticketing infrastructure, memberships, donations for cultural institutions) and Connect&GO (all-in-one attraction management with RFID technology).

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed
- **Key Metric**: Over $7 billion in total bookings processed; total funding raised $193.55M
- **Notable Investors/Partners**: Springcoast Partners (lead in Series D), WestCap, Goldman Sachs Alternatives, Eric Schmidt (Innovation Endeavors), Jack Dorsey, David Bonderman, Paul English (Kayak founder), SV Angel, CAA
- **Growth Signals**: Raised $70M Series D in May 2026; acquired ACME Ticketing and Connect&GO to expand into museums and attractions; named a Challenger by analysts alongside Airbnb, Expedia, and Klook; won Arival’s 2024 Industry Innovation Award; honored with Built In’s 2025 “Best Place to Work” award.

## Competitive Advantages
- **Comprehensive tech stack**: End-to-end platform covering booking, payments, marketing, AI, and on-site operations – unlike fragmented competitors.
- **AI-first approach**: Hundreds of AI agents working 24/7 for dynamic pricing, fraud detection, and operational automation; early mover in AI for the experiences industry.
- **Scale and network**: Over 150 million consumers reached, 300,000 things to do, and thousands of merchants including iconic institutions like MoMA, Whitney Museum, Seattle Aquarium, and Bryant Park.
- **Deep integrations**: Acquisitions of ACME and Connect&GO provide specialized capabilities for ticketing, memberships, and RFID – creating a moat in the museum/attractions segment.

## Strategic Focus
- **AI acceleration**: Doubling down on AI to digitize the experiences industry, with 40% of operators still lacking online booking tools.
- **Market expansion**: Moving beyond tours/activities into museums, theme parks, and cultural attractions through acquisitions and product development.
- **Direct demand enablement**: Helping operators build direct relationships with customers via AI, video platforms, and influencers (TikTok, Instagram).

## Why Work Here
- **Remote-first culture**: Peek is a remote-first company, empowering employees to work from anywhere with a remote work stipend and robust tech stack.
- **Recognized culture**: Named a 2025 “Best Place to Work” by Built In; strong emphasis on collaboration, customer obsession, and continuous improvement.
- **Comprehensive benefits**: Competitive compensation and equity, generous PTO, paid parental leave, 401(k), wellness discounts, mental health subscription, FSA/HSA, and employee assistance programs.
- **Engineering culture**: Engineers leverage cutting-edge languages and tech stacks; monthly no-internal-meeting days; internal mobility opportunities; social committees and ERGs.
- **Growth trajectory**: High-growth company with recent $70M funding and acquisitions, offering employees the chance to work on AI-powered products shaping a $330B industry.

## Sources
1. [peek.com](https://www.peek.com/)
2. [careers.peek.com](https://careers.peek.com/)
3. [cbinsights.com](https://www.cbinsights.com/company/peek-travel)
4. [jobs.ashbyhq.com](https://jobs.ashbyhq.com/peek)

## Other roles at Peek

- [Security and Compliance Analyst](https://feeny.ai/job/security-and-compliance-analyst-peek-mexico-8n0wpt9xc8r6) — Mexico
- [Assistant Controller](https://feeny.ai/job/assistant-controller-peek-remote-6qy8mgwf5q89)
- [Senior iOS Engineer](https://feeny.ai/job/senior-ios-engineer-peek-mexico-drxxf06c2z6h) — Mexico
- [Senior Quality Engineer- Automated Testing](https://feeny.ai/job/senior-quality-engineer-automated-testing-peek-mexico-8j3c1t2k0pzb) — Mexico
- [Mid Market Account Executive](https://feeny.ai/job/mid-market-account-executive-peek-remote-w9w3x76paxa7)
- [Product Analyst](https://feeny.ai/job/product-analyst-peek-mexico-city-6t5n098jd62g) — Mexico City, Mexico
- [Organic Growth Manager](https://feeny.ai/job/organic-growth-manager-peek-mexico-city-4jg05phzex83) — Mexico City, Mexico
- [Senior Full Stack Engineer](https://feeny.ai/job/senior-full-stack-engineer-peek-mexico-xrx4wdmyg6d1) — Mexico
- [Enterprise Account Executive](https://feeny.ai/job/enterprise-account-executive-peek-remote-e2ejeap1013h)
- [Sr. Backend Engineer](https://feeny.ai/job/sr-backend-engineer-peek-mexico-city-rq24gmpck3q4) — Mexico City, Mexico