devsecops engineer

The company develops software for iGaming and operates a PCI DSS-certified payment gateway for online businesses, providing integration with payment systems through a single software platform.

• Design and implement security checks in CI/CD pipelines using GitHub and GitLab;
• Configure and maintain SAST, SCA, and container scanning tools, including Trivy and Dependabot;
• Identify and remediate vulnerabilities in applications and container images;
• Support container image scanning and image signing practices;
• Write and maintain automation scripts in Python and Bash;
• Collaborate with engineering teams to embed security into development workflows.

• 3+ Years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, Security Engineering, or similar roles;
• Hands-on experience with CI/CD pipelines using GitHub or GitLab;
• Strong hands-on experience with SAST, SCA, container scanning, and related CI/CD security tooling in production environments;
• Practical experience with Kubernetes and Helm;
• Hands-on experience provisioning and maintaining infrastructure in AWS, GCP, Azure, or OCI;
• Hands-on experience with Terraform and Ansible for infrastructure automation, provisioning, and configuration management;
• Basic scripting skills in Python and Bash;
• Understanding of OWASP Top 10;
• Strong interest in security and a security-first mindset;
• Ability and willingness to work closely with Security teams and drive security-related improvements within engineering workflows;
• Nice to have: Exposure to Kubernetes security tools such as Kyverno, OPA, and StackRox, experience with GitOps tools such as ArgoCD or Flux2, background in securing infrastructure against PCI DSS requirements.

• No conditions specified