Senior DevSecOps Engineer

As a Senior DevSecOps Engineer, you will lead the integration of security into our DevOps processes, pipelines, and tooling. You will architect and implement security solutions, including SIEM, vulnerability management, and other critical security tools, to protect our BaaS platform. You will collaborate with engineering, DevOps, and security teams to ensure our financial applications and infrastructure are secure by design while enabling efficient and scalable operations. Responsibilities

• Architect, deploy, and manage security-related tools such as SIEM (e.g., Splunk, QRadar), vulnerability scanners (e.g., Nessus, Qualys), and endpoint protection systems.
• Embed security practices and tools into CI/CD pipelines to ensure code, applications, and infrastructure meet security standards before deployment.
• Automate the detection, reporting, and remediation of vulnerabilities in applications, containers, and infrastructure.
• Secure and review IaC templates (e.g., Terraform, CloudFormation) to enforce best practices for cloud environments.
• Design and implement security controls for cloud platforms (AWS, Azure, GCP), including IAM policies, network segmentation, and logging.
• Develop scripts and tools to automate security testing, monitoring, and remediation processes.
• Implement tools like Open Policy Agent (OPA) to enforce security policies across code, infrastructure, and deployments.
• Enhance security monitoring by setting up SIEM solutions and integrating them with logging and alerting tools to detect threats in real time.
• Conduct threat modeling sessions with development teams to identify and mitigate potential risks early in the design phase.
• Implement and maintain tools to ensure compliance with industry regulations such as SOC 2, PCI DSS, and GDPR.
• Partner with development, DevOps, and security teams to train and promote secure coding practices and a DevSecOps culture.

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
• 5+ years of experience in DevSecOps, security engineering, or related roles in cloud and DevOps environments.
• Good conversational and professional proficiency in English.
• Proven experience implementing and managing security tools such as SIEM, vulnerability scanners, and endpoint protection systems.
• Expertise in deploying and managing SIEM solutions (e.g., Splunk, QRadar, Elastic SIEM).
• Proficiency in CI/CD tools like Jenkins, GitLab CI/CD, Azure DevOps, or CircleCI.
• Strong knowledge of containerization (Docker, Kubernetes) and securing containerized environments.
• Expertise with security tools such as Snyk, Veracode, SonarQube, or Checkmarx for code analysis.
• Experience with cloud security in AWS, Azure, or GCP (e.g., IAM, security groups, WAF).
• Hands‑on experience with scripting languages (e.g., Python, Bash, PowerShell).
• Familiarity with Infrastructure as Code (IaC) tools like Terraform, CloudFormation, or Pulumi.
• Understanding of security standards and frameworks (e.g., NIST, OWASP, CIS Benchmarks).

• Certifications such as AWS Security Specialty, Certified Kubernetes Security Specialist (CKS), or Certified DevSecOps Professional.
• Experience in financial services, fintech, or regulated industries.
• Familiarity with Zero Trust Architecture principles.
• Knowledge of secure API development and integration.

• Strategic thinking with a bias for action.
• Strong analytical and problem‑solving skills.
• Ownership and accountability.
• Operational rigor and attention to detail.
• Excellent communication and collaboration abilities.
• Curiosity, adaptability, and passion for innovation.

• Permanent, full‑time role.
• A fair and market‑aligned compensation.
• Dynamic, international culture built on trust and collaboration.
• Real impact on global fintech transformation projects.
• Growth and learning opportunities within an innovative group.

We’re proud to be an equal opportunity employer, committed to diversity and inclusion in all forms.