Senior DevSecOps Engineer

About the role

As a Senior DevSecOps Engineer at BairesDev, you will embed security into every phase of the software development lifecycle. You will serve as the bridge between development, operations, and security teams, ensuring that protection is built‑in rather than added at the end.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks to ensure continuous compliance.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Oversee the implementation and rotation of enterprise‑wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews to proactively address risks in cloud‑native environments.

Required profile

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Proven expertise in integrating security tooling such as Snyk, Trivy, or Aqua into CI/CD pipelines.
• Proficiency in implementing Policy as Code using Open Policy Agent (OPA) or similar frameworks.
• Hands‑on experience with secrets management and Infrastructure as Code security.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• Infrastructure as Code (IaC)
• CI/CD pipelines
• Secrets management
• Container security
• Cloud‑native environments

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for a home office.
• Flexible hours – create your own schedule.
• Paid parental leave, vacations, and holidays.
• Innovative, multicultural environment with top global talent.
• Mentorship, promotion pathways, skill development, and diverse growth opportunities.