DevSecOps Engineer

The company’s AWS infrastructure and Kubernetes platform support its Python backend, data, and AI teams.

• Design, secure, and operate AWS infrastructure, including EKS/ECS, Lambda, S3, RDS, VPC, and IAM
• Own cloud security, including least-privilege IAM, encryption at rest and in transit, secrets management, network segmentation, and threat detection
• Harden production Kubernetes with RBAC, network policies, pod security standards, admission control, and runtime security
• Manage infrastructure as code with Terraform, including policy as code and security guardrails
• Build CI/CD pipelines with integrated SAST, dependency scanning, container image scanning and signing, and secret detection
• Own monitoring, logging, and alerting; lead incident response, including security incidents and post-mortems
• Run vulnerability management and patching, and remediate audit findings
• Support data and AI/LLM workloads securely and control cloud costs

• 5+ Years in DevOps, SRE, or platform engineering, including 3+ years running AWS and Kubernetes in production
• Hands-on production experience in cloud and infrastructure security, including IAM, KMS/secrets, network security, GuardDuty, and Security Hub
• Production Kubernetes experience, including RBAC, network policies, and pod security
• Experience with AWS EKS, ECS, Lambda, S3, RDS, and VPC
• Experience with Terraform and infrastructure as code
• Experience with secure CI/CD and DevSecOps tooling, including SAST and image and dependency scanning
• Experience with observability and incident response using Prometheus, Grafana, ELK, or CloudWatch
• Docker and containerization experience
• Scripting experience in Python and Bash
• Strong Linux and networking fundamentals
• Based in Poland
• Fluent English
• Будет плюсом: AWS Security Specialty, CKS, or CISSP certifications, SOC 2 or ISO 27001 compliance experience, SIEM tooling, threat modeling, ArgoCD or GitOps, infrastructure for ML/LLM workloads, FinOps or cloud cost optimization

• Условий в вакансии нет