Senior DevSecOps Engineer (Remote)

About the role

We are looking for a Senior DevSecOps Engineer to embed security into every phase of our software delivery pipeline. Working remotely, you will collaborate with development, operations, and security teams to make protection a built‑in feature rather than an after‑thought.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools (e.g., Snyk, Trivy, Aqua) into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks such as Open Policy Agent.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Implement and rotate enterprise‑wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Proven expertise with security tooling like Snyk, Trivy, or Aqua.
• Hands‑on experience with Policy as Code (OPA or similar) and IaC security.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• CI/CD pipelines
• Infrastructure as Code (IaC)
• Container security
• Cloud‑native environments
• Secrets management

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule and paid parental leave, vacations, holidays.
• Innovative, multicultural environment with mentorship, promotions, and skill‑development opportunities.