Senior DevSecOps Engineer (Remote)

About the role

We are looking for a Senior DevSecOps Engineer to embed security into every phase of our software delivery pipeline. Working fully remotely, you will collaborate with development, operations and security teams to ensure that security is a built‑in feature, not an after‑thought.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools (e.g., Snyk, Trivy, Aqua) into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks such as Open Policy Agent.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Implement and rotate enterprise‑wide secrets management and protect sensitive data.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• Minimum 4 years of experience in DevSecOps, DevOps or cybersecurity engineering.
• Proven ability to integrate security tooling into CI/CD workflows.
• Hands‑on experience with Policy as Code and secrets management solutions.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• Policy as Code
• Infrastructure as Code (IaC)
• Container security
• Cloud‑native security
• Secrets management
• CI/CD pipeline integration

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations and holidays.
• Multicultural environment with mentorship, promotion and skill‑development opportunities.