DevSecOps Engineer

Details

• Embed security-by-default across the SDLC (shift-left testing, secure configurations, vulnerability scanning)
• Own IAM, RBAC, SSO/SAML, and access governance across all platform environments
• Ensure compliance with ISO 27001, SOC 2, NCSC guidelines, Cyber Essentials, and related frameworks
• Provide hands-on guidance to engineering teams and drive secure development practices
• Own multi-cloud architecture across AWS (primary), Azure, and GCP
• Manage Kubernetes workloads and serverless architecture (AWS Lambda)
• Lead infrastructure-as-code using Terraform to ensure consistency and scalability
• Contribute to platform-level scalability, resilience, and performance decisions
• Support Windows Server and Azure environments, integrating with identity systems
• Own and evolve CI/CD pipelines across Jenkins, GitLab CI, and Azure DevOps
• Drive automation of deployments, testing, and provisioning
• Improve developer experience through faster, more reliable, secure delivery
• Own monitoring and observability using tools like Prometheus, Grafana, Splunk (or equivalents)
• Define and manage SLIs/SLOs
• Lead incident response, root cause analysis, and prevention strategies
• Proactively identify and mitigate reliability and performance risks
• Strong hands-on experience in AWS cloud architecture
• Experience implementing DevSecOps practices across the SDLC
• Experience with IAM, RBAC, SSO/SAML, and modern security tooling
• Expertise in building and managing CI/CD pipelines at scale (e.g., GitLab CI, Jenkins, Snyk, SonarQube, Lacework/FortiCNAPP)
• Proficiency in Bash and Python scripting for automation
• Strong Kubernetes experience (cluster management, containerised delivery at scale)
• Experience with observability, monitoring, and incident management (Grafana, Sentry, Darktrace, SLIs/SLOs)
• Experience leveraging AI tooling to improve engineering workflows and delivery
• Security is embedded early, reducing vulnerabilities reaching production
• Compliance standards consistently met with no major audit findings
• Cloud environments are reliable, scalable, and aligned with IaC standards
• CI/CD pipelines are stable, trusted, and improving delivery performance
• Automation meaningfully reduces manual effort across engineering
• Incidents are detected early and resolved at root cause
• Monitoring and alerting are trusted and actionable across teams
• This is a remote work offering for Bulgaria only
• Gross salary budget is up to a maximum of €60,000 per year
• Online interview with the Senior Talent Advisor
• Technical interview with the Director of Engineering and the Director of IT & Cybersecurity
• Introduction to the CPTO