DevOps Engineer (security)
Core
Design and implement security-focused capabilities across the SDLC, embedding automated security testing into CI/CD pipelines to protect business-critical applications.
Role type
Senior DevSecOps Engineer (Shift-Left Security)
Builds
Secure CI/CD frameworks, automated security tooling, and resilient infrastructure for Threat Detection & Response and Vulnerability Management.
Domain
Cybersecurity, Cloud Infrastructure, DevOps
Deliverable
production ML models | product features | infrastructure
Required skills
Shift-Left-On-Security frameworks, SAST/DAST/SCA/OSS management, Threat Modeling, Penetration Testing coordination, Cloud administration (AWS/Azure/GCP), Container orchestration (Docker/Kubernetes), IaC (Terraform), Linux system administration, Scripting (Python/Bash), Observability (Grafana/New Relic/OpenTelemetry)
Preferred skills
Compliance auditing (ISO 27001/27002, NIST 800-53, PCI DSS, CIS Controls), SecOps experience
Technologies
GitLab CI/CD, AWS, Azure, GCP, Docker, Kubernetes, Terraform, Grafana, New Relic, OpenTelemetry, Python, Bash
Responsibilities
Embed and optimize automated security testing (SAST, DAST, SCA, Container Security) into GitLab CI/CD pipelines; Perform platform security assessments and support vulnerability remediation; Coordinate penetration testing activities and provision isolated test environments; Conduct threat modeling exercises for new features and infrastructure changes; Support engineering teams with DevSecOps principles and automation solutions for self-service security pipelines.
Seniority
Senior, hands-on IC
