Senior DevSecOps Engineer (Remote)

About the role

We are looking for a Senior DevSecOps Engineer to embed security throughout the software development lifecycle. You will act as the bridge between development, operations, and security teams, ensuring that security is a built‑in feature, not an afterthought.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks to maintain continuous compliance.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Oversee enterprise‑wide secrets management and implement data‑protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• 4+ years of experience in DevSecOps, DevOps, or cybersecurity engineering.
• Proven expertise with security tooling such as Snyk, Trivy, or Aqua.
• Experience implementing Policy as Code using Open Policy Agent (OPA) or similar.
• Hands‑on experience with secrets management and IaC security.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• CI/CD pipeline integration
• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• Policy as Code
• Infrastructure as Code (IaC)
• Secrets management
• Container security
• Cloud‑native security strategies

What we offer

• 100% remote work from anywhere
• Competitive compensation in USD or local currency
• Hardware and software setup for home office
• Flexible hours – create your own schedule
• Paid parental leave, vacations, and holidays
• Innovative, multicultural environment with top global talent
• Mentorship, promotion pathways, and skill‑development opportunities