Senior DevSecOps

You will lead and mature cloud security practices across AWS and Azure environments. This role is pivotal in embedding security into the development lifecycle, driving sustainable vulnerability remediation, and influencing architectural decisions for new and legacy systems. You will partner with development teams, cloud architects, and the cybersecurity organization to ensure a robust security posture, monitor compliance, and champion Infrastructure as Code (IaC) best practices.

Timezone flexibility: Overlap until 7 PM CET.

Requirements

• 10+ years of experience in IT, with 5+ years in cloud security and DevSecOps roles.
• Deep expertise in AWS and Azure security services and architectures.
• Experience in security automation, scripting with Python and Bash, and cloud-native security tooling.
• Proven track record of leading security initiatives in large-scale, multi-cloud environments.
• Advanced proficiency in IaC tools: Terraform, CloudFormation, and ARM templates.
• Hands-on experience with Datadog, Wiz, and vulnerability management platforms.
• Strong knowledge of CI/CD security integration, container security (Docker, Kubernetes), and policy-as-code.
• Familiarity with compliance frameworks (SOC 2) and risk management methodologies.
• Exceptional communication and leadership skills for influencing technical and business stakeholders.

Nice to have

• Certifications: AWS Certified Security – Specialty, Azure Security Engineer, GIAC Cloud Security Automation, Kubernetes Security Specialist, or equivalent.

Responsibilities

• Define and implement advanced security strategies for multi-cloud environments (AWS, Azure).
• Drive security automation and continuous compliance across CI/CD pipelines.
• Influence architecture and design decisions to align with Zero Trust and cloud-native security principles.
• Lead vulnerability identification, prioritization, and remediation efforts across diverse projects and workloads.
• Collaborate with Development, Cybersecurity, and Tech Architecture teams to ensure sustainable fixes and long-term risk reduction.
• Establish governance frameworks for secure development and deployment practices.
• Own security posture monitoring using Datadog, Wiz, and native cloud tools.
• Track and improve organizational security scores, compliance benchmarks, and risk indicators.
• Collaborate with Cybersecurity to implement monitoring strategies for the detection of anomalies and policy violations.
• Provide executive-level reporting and actionable insights for leadership.
• Champion secure IaC practices (Terraform) with DevOps and SRE teams.
• Integrate automated security checks into build pipelines and enforce policy-as-code.
• Mentor teams on secure coding, container security, and cloud security best practices.
• Act as a trusted advisor to development, operations, and security stakeholders.
• Drive cultural adoption of security-first principles across engineering teams.
• Contribute to incident response planning and post-mortem analysis for security events.

We offer

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support your growth.
• Flexibility in workspace, either remote or office-based.
• Bonuses for article writing, public talks, and other activities.
• Generous time off, including vacation, national holidays, sick leaves, and family days.
• Personalized learning programs tailored to your interests and skill development.
• Free tech webinars and meetups.
• Regular corporate online activities.
• A friendly, supportive community.