Sr. DevSecOps Engineer

In this role, you will be responsible for designing and maintaining secure, scalable DevSecOps practices across the software delivery lifecycle. You will integrate security into CI/CD pipelines, ensuring continuous protection from development through production. Key responsibilities include:

• Designing, implementing, and maintaining secure CI/CD pipelines with embedded security testing at every stage of delivery
• Implementing and managing automated security scanning tools such as SAST, DAST, SCA, and container security solutions
• Supporting API security tooling and ensuring consistent reporting across security aggregation platforms
• Collaborating with development teams to embed secure coding practices and reduce vulnerabilities early in the lifecycle
• Ensuring adherence to compliance frameworks such as PCI-DSS, GDPR, SOC 2, and other industry standards
• Working closely with cloud and infrastructure teams to strengthen IAM, encryption, network security, and secrets management
• Mentoring junior engineers and driving a security-first mindset across engineering and DevOps teams
• Supporting continuous improvement of security posture across cloud-native environments and distributed systems

Requirements

This role requires strong software engineering fundamentals combined with hands-on DevSecOps and cloud security expertise. You should be comfortable working in modern cloud-native ecosystems and securing complex distributed systems. Key requirements include:

• 5+ years of software development experience in Python, Go, Java, JavaScript/TypeScript, or similar
• 3+ years of hands-on experience in DevSecOps or security engineering roles
• Strong understanding of OWASP principles and secure application development practices
• Deep expertise in cloud security across AWS, Azure, or GCP environments
• Experience with API security tools and platforms such as WAFs, Akamai, Cloudflare, or similar solutions
• Strong knowledge of CI/CD tools including Jenkins, GitHub Actions, GitLab CI, or CircleCI
• Hands-on experience with Infrastructure as Code tools such as Terraform, CloudFormation, or Ansible
• Solid understanding of cloud-native security domains including IAM, encryption, network security, and secrets management
• Strong communication skills with the ability to influence both technical and non-technical stakeholders
• Experience in compliance-driven environments and security auditing is highly desirable

Benefits

• Flexible benefits package including health insurance, retirement plans, parental leave, and wellbeing support
• Travel-related employee perks and discounts across global travel services
• Access to extensive learning platforms with 20,000+ courses and continuous upskilling opportunities
• Internal mobility and career development opportunities across global teams
• Inclusive work culture with employee resource groups and collaboration networks
• Strong emphasis on work-life balance and flexible working arrangements
• Exposure to large-scale cloud-native systems in a global enterprise environment.

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

 

 

#LI-CL1