Senior DevSecOps Engineer (Remote)

About the role

We are looking for a Senior DevSecOps Engineer to embed security into every phase of our software delivery pipeline. You will act as the bridge between development, operations, and security, ensuring that protection is built‑in rather than added at the end.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools (e.g., Snyk, Trivy, Aqua) into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks such as Open Policy Agent.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Oversee enterprise‑wide secrets management and implement rotation and data‑protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• 4+ years of experience in DevSecOps, DevOps, or cybersecurity engineering.
• Proven expertise integrating security tooling like Snyk, Trivy, or Aqua into CI/CD workflows.
• Hands‑on experience with Policy as Code (OPA or similar) and secrets management.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• Policy as Code
• CI/CD pipelines
• Infrastructure as Code (IaC)
• Secrets management
• Container security
• Cloud‑native environments

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule – create your own hours.
• Paid parental leave, vacations, and holidays.
• Multicultural environment with top global talent.
• Mentorship, promotion pathways, and continuous skill development.