Senior DevSecOps Engineer

Tasks

• Automate vulnerability monitoring for AWS and Kubernetes
• Build and manage infrastructure with Terraform
• Drive DevSecOps best practices and mentor team members
• Embed security by design across SDLC
• Harden Kubernetes clusters with security controls
• Integrate security practices into CI pipelines
• Lead incident response for cloud and container workloads
• Perform threat modeling and risk assessments
• Research and implement new security tools and automation

Perks/Benefits

• Flexible working hours
• Healthcare coverage
• Hybrid work
• Language learning support
• Mental health support
• Modern tech setup
• Professional development budget
• Relocation support
• Remote work
• Unlimited sick leave
• Unlimited vacation

Skills/Tech-stack

AWS CloudTrail | AWS GuardDuty | AWS IAM | AWS KMS | AWS VPC | AWS WAF | Anchore | Aqua Security | Bash | CI/CD | CIS Benchmarks | Cloud policies | Cloudflare API | Cloudflare API Gateway rules | Cloudflare Access | Cloudflare DNS | Cloudflare WAF | Cloudflare Zero Trust | Conftest | Container Security | Container security scanners | DAST | DUO SSO | Falco | GitHub Actions | Go | Grype | ISO 27001 | Image scanning | Infrastructure as Code | Kubernetes Image Scanning | Kubernetes NetworkPolicy | Kubernetes RBAC | Kubernetes security | Logging | MFA | Monitoring | NIST CSF | Network Security | OIDC | OPA | Policy-as-Code | Python | Runtime Security | SAML | SAST | SCA | SIEM | SOC Integrations | SSO | Secret management | Security Scanners | TLS | Terraform | Terraform Cloud | Terraform Cloud Policies | Trivy | Vulnerability scanning | Zero Trust | “as-code”