Senior DevSecOps Engineer

ABOUT THE POSITION

At Kreditz, we believe financial data should empower people and businesses — not limit them. Our platform turns raw financial information into actionable insights for credit, risk, and identity. As we scale across Europe, we’re looking for a Senior DevSecOps Engineer who’s excited about building secure, reliable systems and wants to play a key role in how we grow securely.

You’ll join a product-driven team where security is seen as an enabler of innovation — not a blocker. If you care about impact, autonomy, and working with kind and driven people, you’ll fit right in.

KEY RESPONSIBILITIES

As a DevSecOps Engineer you will:

• Champion security across our AWS infrastructure, implement resilient architecture and systems that scale safely.
• Build and continuously improve our CI/CD pipelines in GitHub Actions — ensuring they’re not only fast and efficient, but robust and secure from end to end.
• Design guardrails and tools that help developers write secure code, from IDE to production.
• Integrate and manage SCA, SAST, and DAST tooling across the software development lifecycle, working closely with engineering teams.
• Implement smart, scalable security monitoring and alerting that helps us catch issues early and learn fast.
• Collaborate across teams to guide decisions on secure design, coding practices, and threat modeling.
• Contribute to shaping a security-first culture that supports both compliance and innovation.

CANDIDATE REQUIREMENTS

• Experience: Documented experience from working in security-focused infrastructure, platform engineering or DevSecOps roles and you are comfortable navigating both code and cloud.
• AWS expertise: You understand AWS deeply, particularly in areas like IAM, networking, encryption, and monitoring.
• CI/CD skills: You’ve built and secured pipelines, ideally with GitHub Actions.
• Coding experience and skills: You’ve worked as a developer preferably fullstack and have active skills in coding.
• Hands-on with tooling: You’ve worked with SCA/SAST/DAST tools and can evaluate, configure, and tune them across environments.
• Security Certifications: Certifications like OSCP, GPEN, or CEH are valuable to us because they demonstrate practical security acumen.

WE ARE LOOKING FOR

• Pragmatism: You know how to strike a balance between security and speed — and when to advocate for one or the other.
• Team orientation: You enjoy collaborating with engineers, product managers, and compliance leads alike — bringing security into the conversation early.
• Growth mindset: You believe good security is always evolving and are excited to keep learning.

APPOINTMENT OF ROLE

As soon as possible

SCOPE

Full-time, permanent employment (tillsvidareanställning)

SALARY

Fixed monthly salary

REPORTING

You will report to the company's CISO

WORKPLACE

Our office is in Danderyd, Stockholm, where we work together five days a week

RECRUITMENT PROCESS

We interview candidates on an ongoing basis (ongoing selection)

CONTACT

Lorenzo Puccio, COO, lorenzo@kreditz.com