Cloud Security, DevSecOps Engineer – AWS

This is a fully remote position, open to applicants in Malta, +17 more countries.

📋 Description

• Evaluate and secure AWS environments, encompassing IAM, VPC, EC2, ECS, Fargate, RDS, and S3.

• Detect and mitigate vulnerabilities, misconfigurations, and potential security threats.

• Deploy AWS security services including GuardDuty, Security Hub, Inspector, CloudTrail, WAF, and KMS.

• Enhance access controls, encryption, secrets management, and network security.

• Implement automated vulnerability scanning, threat detection, and security monitoring.

• Integrate security checks into CI/CD pipelines, covering code, dependencies, secrets, and container scanning.

• Secure Docker containers, cloud workloads, APIs, and deployment environments.

• Improve infrastructure hardening, patch management, backups, and disaster recovery security.

• Create incident response procedures, security alerts, and remediation processes.

• Maintain security policies while supporting audits and compliance requirements.

• First 30 days: evaluate AWS infrastructure, identify security gaps, and provide a prioritized remediation plan.

• Days 31–60: address critical vulnerabilities, enhance access controls, and implement security automation.

• Days 61–90: establish continuous monitoring, enhance incident response, and deliver a long-term security roadmap.

• Take responsibility for cloud security enhancements from assessment to implementation.

⛳️ Requirements

• Over 4 years of experience in Cloud Security, DevSecOps, or Infrastructure Security.

• Strong hands-on experience with AWS security and knowledge of IAM, VPC, encryption, and cloud architecture.

• Proficient in securing Linux servers, Docker containers, EC2, ECS, and Fargate.

• Practical experience in implementing security automation within CI/CD pipelines.

• Familiarity with vulnerability management, threat detection, and incident response.

• Experience with Terraform or other Infrastructure as Code tools.

• Proficient in Python, Bash, or similar scripting languages.

• Solid understanding of web and API security, including the OWASP Top 10.

• Capability to independently assess risks and implement effective security solutions.

• AWS Security Specialty certification or equivalent is preferred.

• Experience in iGaming, FinTech, Payments, or other high-traffic transactional sectors is advantageous.

• Knowledge of ISO 27001, SOC 2, or PCI DSS is a plus.

• Familiarity with Kubernetes, SIEM platforms, and security monitoring tools is beneficial.

• Experience with penetration testing and security assessment methodologies is a plus.

🏝️ Benefits

• Full-time employment.

• Fully remote work arrangement.

• AWS Security Specialty certification or equivalent is considered a nice-to-have, not a benefit.