DevSecOps Engineer (Poland or Romania) to $7000

About the Product:

Elementor is the leading website-building platform for WordPress, empowering developers, designers, and marketers to create their futures one pixel at a time. With over 16M websites built using Elementor, it powers more than 10% of all websites globally, with a new site created every 10 seconds!

About The Role:

We're seeking an experienced DevSecOps Engineer to join our team and secure our cloud environments and CI/CD flows. In this role, you'll lead security efforts in our fast-paced production environments, define operational tools and processes, and directly impact R&D work.

Key Responsibilities:

• Secure and monitor live production environments.
• Lead security investigations and manage incidents.
• Implement automation for security monitoring and incident response.
• Design and develop security solutions tailored to R&D and production needs.
• Conduct vulnerability assessments, penetration testing, and security scans.
• Manage Elementor’s bug bounty program and report on security metrics.

Required Competence and Skills:

• 3+ years of hands-on DevOps experience in a cloud environment.
• At least 2 years of experience with Kubernetes, containers, and serverless security.
• 1+ years of relevant industry experience in security, with a solid knowledge of information security principles and practices.
• Experience integrating security into CI/CD pipelines.
• Experience with any of such cloud vendors as GCP/AWS/Azure 
• In-depth understanding and proven experience in security monitoring and analytics.
• AppSec - Knowledge of SSDLC best practices around application security.
• Strong understanding of cybersecurity and network principles.
•  

Advantages:

• Solid understanding of security/operations infrastructure.
• Experience with large-scale cloud infrastructures and services.
• Experience leading integration processes for SIEM systems.
• Experience with incident response (IR) attacks and mitigation methods.
• Experience building tools and processes using Python or Go to address security-related needs.