Continuously improve the security of our AWS and Kubernetes platforms.
Strengthen IAM, RBAC, encryption, secrets management, and network controls through secure-by-default policy-as-code.
Manage edge security, including traffic filtering, WAF configuration, and external exposure management.
Perform security reviews of new services, architectural changes, and platform components.
Embed automated security controls into SDLC and CI/CD (SAST, dependency and container scanning, policy enforcement).
Lead vulnerability management processes, including detection, assessment, prioritization, and reporting.
Integrate automation and AI-assisted tooling to enhance security reviews and reduce manual effort.
Define and implement security controls for AI infrastructure components, including gateways, MCP servers, and model proxies.
Identify and mitigate AI-specific risks such as prompt injection, data leakage, and agent privilege escalation.

5+ years of hands-on experience in DevSecOps, Cloud Security, or related fields.
Strong hands-on experience operating AWS and Kubernetes in production environments.
Experience implementing security in Infrastructure as Code and CI/CD workflows.
Solid understanding of cloud security fundamentals such as access control, secrets management, network security, and encryption.
Familiarity with container security and common application security risks.
Deep understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, and agent privilege escalation; hands-on experience securing AI infrastructure components such as LLM gateways, MCP servers, or agent-based workflows.
Comfortable with scripting and working in Git-based development environments.
Good communication skills and ability to work effectively with engineering and product teams.
Comfortable communicating clearly in English, both written and spoken.

Competitive senior-level compensation, reflecting the seniority and impact of the role (depending on location).
Learning & development budget to support your professional growth.
Fully paid vacation and sick leave.
Sports compensation.
Real growth prospects, significant responsibility, and the ability to make an immediate impact from day one.

DevSecOps Engineer

Key skills