devsecops engineer in fintech

Vivid is a financial platform that helps businesses and individuals manage money across Europe. It provides multi-IBAN accounts, savings products, business cashback, team cards, accounting integrations, investments, cryptocurrencies, and personalized financial insights.

• Continuously improve the security of AWS and Kubernetes platforms;
• Strengthen IAM, RBAC, encryption, secrets management, and network controls through secure-by-default policy-as-code;
• Manage edge security, including traffic filtering, WAF configuration, and external exposure management;
• Perform security reviews of new services, architectural changes, and platform components;
• Embed automated security controls into SDLC and CI/CD, including SAST, dependency and container scanning, and policy enforcement;
• Lead vulnerability management processes, including detection, assessment, prioritization, and reporting;
• Integrate automation and AI-assisted tooling to enhance security reviews and reduce manual effort;
• Define and implement security controls for AI infrastructure components, including gateways, MCP servers, and model proxies;
• Identify and mitigate AI-specific risks such as prompt injection, data leakage, and agent privilege escalation;
• Contribute to long-term security direction and make hands-on improvements across security and engineering teams.

• 5+ Years of hands-on experience in DevSecOps, Cloud Security, or related fields;
• Strong hands-on experience operating AWS and Kubernetes in production environments;
• Experience implementing security in Infrastructure as Code and CI/CD workflows;
• Solid understanding of access control, secrets management, network security, and encryption;
• Familiarity with container security and common application security risks;
• Deep understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, and agent privilege escalation;
• Hands-on experience securing AI infrastructure components such as LLM gateways, MCP servers, or agent-based workflows;
• Comfortable with scripting and working in Git-based development environments;
• Good communication skills and ability to work effectively with engineering and product teams;
• Comfortable communicating clearly in English, both written and spoken;
• Nice to have: Experience scaling security practices in fast-growing or regulated environments, experience building internal security tooling or automation from scratch.

• Relocation support to Cyprus, including visa and relocation package;
• Competitive senior-level compensation depending on location;
• Learning and development budget;
• Fully paid vacation and sick leave;
• Sports compensation;
• Real growth prospects and significant responsibility.