About this role

Write and maintain Infrastructure as Code (IaC) with secure defaults
Hunt for weaknesses, perform threat modeling, prioritize remediation, and guide engineering teams on how to fix discovered flaws
Monitor live systems, investigate security anomalies, and respond to breaches
Develop, deploy, and maintain Infrastructure-as-Code (IaC) in a GCP cloud-based environment
Lead the development and enforcement of security architecture and operational best practices
Establish monitoring, alerting, and incident response strategies across environments
Define and execute on security roadmaps
Partner with developers to shift security and reliability left into the SDLC
Support compliance and audit initiatives (SOC2, ISO27001)
Develop and maintain automated CI/CD pipelines
Create automated testing plans for infrastructure and applications
Work and communicate effectively in a group environment with technical and non-technical stakeholders

5+ years of experience in DevOps, SRE, or DevSecOps roles, with increasing leadership or ownership
Deep knowledge of cloud infrastructure, with a focus on security, scalability, and cost-efficiency
Strong experience with infrastructure-as-code (Terraform, Ansible)
Fluency in CI/CD automation (GitHub Actions, ArgoCD, etc.)
Strong understanding of security fundamentals: identity and access management, secrets management, encryption, container security, etc.
Familiarity with compliance frameworks like SOC2 or ISO27001
Comfortable writing code and automation scripts (e.g., Python, Bash, Go)
A strategic mindset paired with startup scrappiness
Experience with Kubernetes, service mesh (e.g., Istio), and zero-trust architecture
History of leading incident response or large-scale reliability improvements
Strong communication skills across engineering and non-technical stakeholders

Senior DevSecOps Engineer – UK&I

Key skills