Description
We are looking for a Senior DevSecOps Specialist to join our team. The position involves designing and maintaining security monitoring systems, incident response, vulnerability management, and supporting secure development practices across our cloud infrastructure.
Responsibilities
•Build and maintain the Security Monitoring System for AWS infrastructure
•Identify and respond to security incidents in AWS
•Detect and address vulnerabilities in code and infrastructure
•Provide expert support to development teams on secure development practices
•Ensure the security of backend infrastructure and its public APIs
•Supervise GitHub configuration in terms of secure development processes
•Set up SAST tools (e.g., Software Composition Analysis, secret detection, CI/CD quality gates, etc.)
•Analyze attack vectors and prioritize remediation of project infrastructure vulnerabilities
Requirements
•1+ year of experience working with AWS (IAM, cloud architecture, etc.)
•1+ year of experience securing Kubernetes environments
•Experience with Cloudflare products (WAF, API Shield, etc.)
•Experience configuring SAST tools (SonarQube, CodeQL, etc.)
•Experience securing CI/CD processes in GitHub
•Understanding and ability to analyze Infrastructure-as-Code (Terraform, Terragrunt, etc.)
•Experience in identifying and investigating information security incidents
•Understanding of security-by-design principles
Conditions
•Stability, development, participation in the future unicorn's growth
•Remote work from anywhere in the world, excluding Russia and Belarus, with a schedule aligned with GMT+3
•Competitive salary in EURO/USDT
•20 working days of paid vacation
•Birthday presents
•Compensation for the purchase of necessary technical devices for the work
•Paid sick leaves
