Middle DevSecOps Engineer
FAVBET Tech develops software that is used by millions of players around the world for the international company FAVBET Entertainment.
We develop innovations in the field of gambling and betting through a complex multi-component platform which is capable to withstand enormous loads and provide a unique experience for players.
FAVBET Tech does not organize and conduct gambling on its platform. Its main focus is software development.
Main areas of work:
- Betting/Gambling Platform Software Development — software development that is easy to use and personalized for each customer.
- Highload Development — development of highly loaded services and systems.
- CRM System Development — development of a number of services to ensure a high level of customer service, effective engagement of new customers and retention of existing ones.
- Big Data — development of complex systems for processing and analysis of big data.
- Cloud Services — we use cloud technologies for scaling and business efficiency.
Responsibilities:
- Participate in defining information security requirements for developed or acquired software
- Test implemented security requirements, ensuring compliance with security standards
- Contribute to securing CI/CD processes and Dev/Test environments
- Monitor and enhance the security posture (hardening) of deployed software (on-premise, SaaS, containers)
- Support the development and administration of security systems (including HashiCorp Boundary, HashiCorp Vault, Cisco Duo)
Skills:
- At least 2 years of experience in application security or DevSecOps
- Understanding of application security principles, common vulnerabilities (OWASP Top 10), and the Secure Software Development Life Cycle (SSDLC)
- Understanding of CI/CD processes and familiarity with relevant tools (e.g., GitLab CI)
- Understanding of and experience with AWS, Kubernetes, and their security capabilities
- Knowledge of Linux and scripting skills in Shell/Bash and Python
- Experience working with web servers
- Practical experience with infrastructure automation tools such as Terraform, Ansible, Helm, and ArgoCD
- English level: B1 (Intermediate)
Preferred:
- Experience with SAST, DAST, or SCA tools
- Understanding of modern web application and microservices architecture
- Knowledge of cloud security solutions, including WAF, DDoS protection, IDS/IPS
- Experience with PowerShell
- Ability to create and maintain technical documentation
We offer:
- 30 day off — we value rest and recreation;
- Medical insurance for employees and the possibility of training employees at the expense of the company and gym membership;
- Remote work or the opportunity — our own modern lofty office with spacious workplace, and brand-new work equipment (near Pochaina metro station);
- Flexible work schedule — we expect a full-time commitment but do not track your working hours;
- Flat hierarchy without micromanagement — our doors are open, and all teammates are approachable.
During the war, the company actively supports the Ministry of Digital Transformation of Ukraine in the initiative to deploy an IT army and has already organized its own cyber warfare unit, which makes a crushing blow to the enemy’s IT infrastructure 24/7, coordinates with other cyber volunteers and plans offensive actions on its IT front line.