Senior DevSecOps Engineer

This is a fully remote position, open to applicants in Poland.

📋 Description

• Design, secure, and manage AWS infrastructure including EKS/ECS, Lambda, S3, RDS, VPC, and IAM.

• Take ownership of cloud security, focusing on least-privilege IAM, encryption, secrets management, network segmentation, and threat detection.

• Strengthen production Kubernetes environments with RBAC, network policies, pod security standards, admission control, and runtime security measures.

• Manage infrastructure as code utilizing Terraform, incorporating policy-as-code and security guardrails.

• Develop CI/CD pipelines that include integrated SAST, dependency scanning, container image scanning and signing, and secret detection.

• Oversee monitoring, logging, and alerting systems.

• Lead incident response for security incidents, including conducting post-mortems.

• Execute vulnerability management and patching processes, addressing audit findings.

• Ensure secure support for data and AI/LLM workloads.

• Monitor and control cloud costs effectively.

• Collaborate closely with Python backend, data, and AI teams.

⛳️ Requirements

• A minimum of 5 years in DevOps, SRE, or platform engineering, with at least 3 years of experience managing AWS and Kubernetes in a production environment.

• Practical experience in cloud and infrastructure security, including IAM, KMS/secrets, network security, and tools like GuardDuty and Security Hub.

• Expertise in Kubernetes operations, focusing on Kubernetes security aspects such as RBAC, network policies, and pod security.

• Proficiency with AWS services: EKS, ECS, Lambda, S3, RDS, and VPC.

• Familiarity with Terraform and infrastructure as code methodologies.

• Knowledge of secure CI/CD practices and DevSecOps tools (SAST, image, and dependency scanning).

• Experience in observability and incident response tools (Prometheus, Grafana, ELK/CloudWatch).

• Competence in Docker and containerization technologies.

• Proficient in scripting with Python and Bash.

• Strong foundational knowledge in Linux and networking.

• Must be based in Poland.

• Fluent in English.

• Preferred qualifications include AWS Security Specialty, CKS, and CISSP certifications; experience with SOC 2 or ISO 27001 compliance; familiarity with SIEM tools; expertise in threat modeling; knowledge of ArgoCD or GitOps; experience with infrastructure for ML/LLM workloads; and skills in FinOps or cloud cost optimization.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and certification.

• A collaborative and innovative work environment.

• Flexible work arrangements.