DevSecOps Engineer

About the role

We are looking for a proactive DevSecOps Engineer with at least 5 years of hands‑on experience to join a small, high‑performing team of DevOps professionals. You will be responsible for building, securing, and scaling cloud infrastructure on AWS while embedding security‑as‑code throughout the development lifecycle.

Key responsibilities

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines.
• Maintain and audit cloud‑infrastructure compliance (SOC2, HIPAA, GDPR) using automated policies.
• Implement security best practices in Terraform/IaC and ensure consistent security‑as‑code.
• Design, deploy, and manage AWS services such as EC2, RDS, OpenSearch, and EKS.
• Operate and harden Kubernetes clusters, applying network policies, RBAC, and pod security standards.
• Monitor and respond to cloud security incidents in collaboration with security and compliance teams.
• Identify automation opportunities and document infrastructure, processes, and decisions.

Required profile

• 5+ years of experience in DevOps or DevSecOps with a strong security focus.
• Security‑first mindset and ability to work independently.
• Excellent communication and collaboration skills.
• Advanced English proficiency.

Required skills

• SAST, DAST, container scanning
• SOC2, HIPAA, GDPR compliance frameworks
• Terraform / Infrastructure as Code
• AWS (EC2, RDS, OpenSearch, EKS)
• Kubernetes, network policies, RBAC, pod security standards
• CI/CD pipeline development
• Security incident monitoring and response