Senior DevSecOps Engineer – Remote

About the role

As a Senior DevSecOps Engineer you will embed security throughout the software development lifecycle, acting as the bridge between development, operations, and security teams. You will ensure that security is a built‑in feature rather than an after‑thought, supporting a fully remote, globally distributed workforce.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks to maintain continuous compliance.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Implement and rotate enterprise‑wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native environments.

Required profile

• Minimum 4 years of experience in DevSecOps, DevOps, or cybersecurity engineering.
• Proven ability to integrate security tooling such as Snyk, Trivy, or Aqua into CI/CD pipelines.
• Experience with Policy as Code using Open Policy Agent (OPA) or similar frameworks.
• Hands‑on experience with secrets management and IaC security.
• Strong understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• Open Policy Agent (OPA)
• CI/CD pipelines
• Infrastructure as Code (IaC)
• Secrets management
• Container security
• Cloud‑native environments

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Multicultural environment with mentorship, promotions, and skill‑development opportunities.