DevSecOps Engineer
Sense Street
full-time
Posted on:
Location Type: Hybrid
Location: Krakow • Poland
Visit company websiteExplore more
About the role
- Design, build, and maintain reliable, scalable, secure cloud and on-premise infrastructure and services
- Devise key principles and tenets that underpin Sense Street’s architecture from current customers’ needs to the future of financial markets
- Integrate DevOps best practices and security across the SDLC: Automate infrastructure provisioning, deployments, integration testing and other operational workflows
- Implement automated security checks and controls in build/test/deploy/release pipelines to catch issues and vulnerabilities early, and ensure secure releases
- Identify and reduce operational toil through tooling and automation
- Define and enforce secure configurations using Infrastructure as Code (IaC)
- Improve infrastructure and service observability, monitor and respond to alerts and issues
- Lead incident response, postmortems, security and reliability improvements
- Collaborate across teams: Work with developers, data scientists, IT administrators and support, and other DevSecOps / Site Reliability Engineers to provide guidance on secure coding and DevOps practices
- Create and maintain best DevOps practices and security standards, runbooks, and internal training to foster a “secure by design” DevOps culture.
Requirements
- Proven experience in DevOps, Security Engineering and/or DevSecOps roles
- Strong scripting skills (Python, Bash, etc.) and IaC tools (AWS CDK / Cloud Formation, Terraform etc.) for automation
- Hands-on experience with CI/CD tools (e.g., GitLab CI/CD, GitHub Actions, Jenkins)
- Experience with cloud platforms (AWS, GCP, Azure) and cloud security best practices
- Familiar with container orchestration and security (Docker, Kubernetes)
- Knowledge of secure, scalable and high availability architecture patterns
- Observability tools and best practices
- Chaos engineering and performance scalability testing and gamedays
- Logs and metrics graphs analysis, issue diagnostics and troubleshooting
- Structured and analytical approach to incident response and problem solving
- Vulnerability scanning and threat modeling methodologies
- Understanding of authentication/authorization frameworks and cryptographic practices
- Familiarity with compliance standards and secure development frameworks
- Excellent problem-solving and analytical capabilities
- Effective communicator with the ability to articulate security needs to technical and non-technical stakeholders
- Strong sense of ownership and a passion for secure, high-quality product delivery.
Benefits
- 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
DevOpsSecurity EngineeringDevSecOpsscripting (Python, Bash)Infrastructure as Code (IaC)AWS CDKTerraformCI/CD toolscloud platforms (AWS, GCP, Azure)container orchestration (Docker, Kubernetes)
Soft Skills
problem-solvinganalytical capabilitieseffective communicationownershipcollaborationincident responsestructured approachguidancetrainingleadership