Senior DevSecOps Engineer (Remote)

About the role

As a Senior DevSecOps Engineer you will embed security into every phase of the software delivery pipeline, acting as the bridge between development, operations, and security teams. The position is fully remote, allowing you to work from anywhere while collaborating with a global team of top‑tier engineers.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools (e.g., Snyk, Trivy, Aqua) into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks such as Open Policy Agent.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Implement and rotate enterprise‑wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• Minimum 4 years of experience in DevSecOps, DevOps, or cybersecurity engineering.
• Proven track record integrating security tooling into CI/CD workflows.
• Hands‑on experience with Policy as Code, secrets management, and IaC security.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• CI/CD pipelines
• Infrastructure as Code (IaC)
• Container security
• Cloud‑native environments

What we offer

• 100% remote work from any location.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and self‑managed hours.
• Paid parental leave, vacation, and holidays.
• Multicultural environment with mentorship, promotion pathways, and continuous skill development.