We are looking for a DevSecOps Engineer to join our development team and help keep our infrastructure and products secure, focusing on cloud infrastructure, CI/CD security, and vulnerability management. You'll also help our engineering teams build secure products and have real influence over how we approach security.
Location: This role can be based in our hybrid offices in Belgrade, Serbia, or Budapest, Hungary; or remotely in Europe.
What You'll Do
- Design, implement, and maintain secure cloud and on-premise infrastructure.
- Integrate security controls into CI/CD pipelines and development workflows.
- Automate security checks, compliance validation, and vulnerability management processes.
- Secure containerized environments and Kubernetes clusters.
- Implement and maintain secrets management, identity, and access control solutions.
- Monitor infrastructure and applications for security threats and vulnerabilities.
- Collaborate closely with developers, QA engineers, and platform teams to promote DevSecOps best practices.
- Participate in security reviews, architecture discussions, and threat modeling activities.
- Contribute to security standards, policies, and technical documentation.
What You Bring
- 5+ years in DevOps, DevSecOps, or infrastructure engineering, with recent focus on security.
- Hands-on cloud security experience, preferably with AWS environments.
- Experience working with pen testers or running security assessments, and following findings through to fixes.
- Experience implementing vulnerability scanning, CVE triage, dependency management, and container security controls.
- Understanding of application and infrastructure security principles.
- Knowledge of networking fundamentals, IAM, secrets management, and secure authentication mechanisms.
- Hands-on experience with Docker and Kubernetes in production.
- Experience with infrastructure as code, such as Terraform, and CI/CD platforms such as Jenkins or similar.
- Knowledge of English (B2 level).
Bonus Skills
- Knowledge of security frameworks and standards such as ISO 27001 or NIST.
- Experience creating security practices for AI use, not just using AI tools.
- Experience with SIEM, monitoring, and observability platforms.
- Security certifications such as AWS Security Specialty, CKS, CISSP, CCSP, or similar.
- Experience contributing to open-source projects.
- Understanding of database security concepts and data protection practices.
We Use the Following Tools
- AWS
- Kubernetes
- Docker
- Terraform
- GitHub
- Prometheus
- Grafana
- ELK Stack
