DevSecOps Engineer

This is a fully remote position, open to applicants in Estonia.

📋 Description

• Collaborate with the team to manage the platform, including Azure, AKS, deployments, upgrades, incident response, and participate in on-call duties.

• Develop and maintain migration infrastructure, encompassing environments, Azure DevOps CI/CD pipelines, infrastructure as code, as well as monitoring and alerting systems.

• Take ownership of the external attack surface and keep an inventory of internet-facing assets along with designated owners.

• Conduct ongoing outside-in monitoring and mitigate exposures.

• Integrate security measures within Azure DevOps and Kubernetes delivery pipelines.

• Execute scanning for code, dependencies, secrets, containers, and infrastructure-as-code with established pipeline gates.

• Establish and uphold the security baseline for Azure and Microsoft 365, which includes identity and access management, MFA, cloud posture, and Defender.

• Manage vulnerability assessments from identification through to confirmed closure while maintaining ISO 27001 documentation.

• Oversee technical controls and provide responses for the ISO 27001 program, including customer security questionnaires and audits.

⛳️ Requirements

• Minimum of 5 years of experience in platform or DevOps engineering.

• Proficient in Azure and Kubernetes in a production environment.

• Demonstrated experience in building clusters, pipelines, and environments, executing upgrades, and participating in on-call rotations.

• Direct experience in security engineering rather than supportive roles.

• Familiarity with managing the technical aspects of ISO 27001 or a similar framework, or overseeing end-to-end vulnerability management.

• Knowledge of external attack surface monitoring, DAST, SAST, SCA, secrets scanning, container scanning, and cloud posture tools.

• Proficient in Bash, PowerShell, or Python.

• Experience with infrastructure as code.

• Fluent in English.

• Proficiency in Estonian or German is considered an advantage.

🏝️ Benefits

• Remote work from anywhere in the EU is available for the right candidate.

• Moderate travel to Tallinn.

• Work within a small, senior team.

• Quick decision-making processes with close proximity to leadership.

• Contribute to a product utilized by thousands of B2B buyers across Europe, supported by an extensive supplier network for every order.