Описание

We are looking for a DevSecOps Engineer to join our development team and help keep our infrastructure and products secure, focusing on cloud infrastructure, CI/CD security, and vulnerability management. You'll also help our engineering teams build secure products and have real influence over how we approach security.

Responsibilities

Design, implement, and maintain secure cloud and on-premise infrastructure
Integrate security controls into CI/CD pipelines and development workflows
Automate security checks, compliance validation, and vulnerability management processes
Secure containerized environments and Kubernetes clusters
Implement and maintain secrets management, identity, and access control solutions
Monitor infrastructure and applications for security threats and vulnerabilities
Collaborate closely with developers, QA engineers, and platform teams to promote DevSecOps best practices
Participate in security reviews, architecture discussions, and threat modeling activities
Contribute to security standards, policies, and technical documentation

Requirements

5+ years in DevOps, DevSecOps, or infrastructure engineering, with recent focus on security
Hands-on cloud security experience, preferably with AWS environments
Experience working with pen testers or running security assessments, and following findings through to fixes
Experience implementing vulnerability scanning, CVE triage, dependency management, and container security controls
Understanding of application and infrastructure security principles
Knowledge of networking fundamentals, IAM, secrets management, and secure authentication mechanisms
Hands-on experience with Docker and Kubernetes in production
Experience with infrastructure as code, such as Terraform, and CI/CD platforms such as Jenkins or similar
Knowledge of English (B2 level)

Nice to have

Knowledge of security frameworks and standards such as ISO 27001 or NIST
Experience creating security practices for AI use, not just using AI tools
Experience with SIEM, monitoring, and observability platforms
Security certifications such as AWS Security Specialty, CKS, CISSP, CCSP, or similar
Experience contributing to open-source projects
Understanding of database security concepts and data protection practices

We offer

This role can be based in our hybrid offices in Belgrade, Serbia, or Budapest, Hungary; or remotely in Europe

Hiring process

Please mention "I found this job at Remocate!" when applying