DevSecOps Lead

We are looking for an experienced DevSecOps Lead to take ownership of our information and infrastructure security, build robust DevSecOps practices, and elevate the security of our On-prem infrastructure to the next level.
 

If you have deep expertise in Security Engineering, hands-on experience with Linux hardening, CI/CD security, and a passion for building secure, scalable systems — we’d love to connect with you!
 

💻 What You Will Do:

On-prem Infrastructure & Systems:

• Perform Linux server hardening, manage patch management, and enforce strict access controls.
• Manage secrets, certificates, PAM, backups, and Disaster Recovery (DR) strategies.

Network Security & Scanning:

• Configure and manage network segmentation, Firewalls, VPNs, IDS/IPS, and WAF.
• Conduct regular network and vulnerability scans, ensuring timely remediation.

Pentesting & Internal Audits:

• Coordinate external pentesting: define scope, select vendors, oversee testing, and manage re-testing.
• Perform hands-on internal security checks using Burp Suite, ZAP, and Metasploit.

Secure SDLC & Code Security:

• Implement SAST, DAST, SCA, and secrets detection directly into CI/CD pipelines.
• Conduct secure code reviews and train developers on OWASP security standards.

Monitoring, Incidents & Compliance:

• Build and maintain SIEM solutions, log management, alerting, and incident response processes.
• Prepare infrastructure and operational processes for annual PCI DSS audits; maintain security policies and documentation.
   

🎯 What We Are Looking For (Must-have):

• 3+ years of experience in DevSecOps, SecOps, or Security Engineering (or DevOps with a strong security focus).
• Deep experience with On-prem Linux servers (this is our core stack).
• Strong Networking expertise: TCP/IP, DNS, routing, firewalls, VPNs, and network segmentation.
• Hands-on experience with network and vulnerability scanning tools (Nmap, Nessus / OpenVAS).
• Experience organizing or conducting penetration tests.
• Integration of code security tools into CI/CD pipelines (SonarQube, Semgrep, Snyk, Trivy, Gitleaks, etc.).
• Scripting proficiency in Bash / Python.
• Upper-Intermediate English or higher (for documentation and communicating with external auditors).

➕ Nice to Have:

• Familiarity with PCI DSS, ISO 27001, or SOC 2 compliance frameworks.
• Industry certifications (OSCP, CEH, CISSP, Security+).
• Hands-on experience with Docker, Kubernetes, Ansible, Terraform, and SIEM tools (Wazuh, ELK, Splunk).
• Experience in Fintech, Payments, E-commerce, or Travel domains.
   

🚀 What We Offer:

• Responsible and high-impact tasks with the opportunity to shape the security architecture of a high-load product.
• Flexible working hours and comfortable working conditions.
• Professional growth support.
• A supportive, tech-driven team without unnecessary bureaucracy.
   

📩 Ready to take on the challenge? Send over your CV, and let’s get in touch!