DevSecOps Engineer

About the role

We are looking for a proactive DevSecOps Engineer with at least five years of hands‑on experience to join a small, high‑performing engineering team. The role focuses on building, maintaining and scaling secure cloud infrastructure on AWS while embedding security‑as‑code throughout the development lifecycle.

Key responsibilities

• Integrate automated security scanning (SAST, DAST, container scanning) into CI/CD pipelines.
• Maintain and audit cloud infrastructure compliance (SOC2, HIPAA, GDPR) using automated policies.
• Implement security best practices in Terraform/IaC to ensure consistent “security‑as‑code”.
• Monitor, investigate and respond to cloud security incidents in collaboration with security and compliance teams.
• Design, deploy and manage AWS services such as EC2, RDS, OpenSearch and EKS.
• Operate and harden Kubernetes clusters, applying network policies, RBAC and pod security standards.
• Continuously improve automation and optimisation of deployment and infrastructure management.
• Document infrastructure, processes and decisions clearly.

Required profile

• 5+ years of professional experience in DevOps or related roles with a strong security focus.
• Proactive attitude, strong communication skills and a growth mindset.
• Ability to work independently and contribute ideas within a collaborative team.

Required skills

• AWS (EC2, RDS, OpenSearch, EKS)
• Kubernetes cluster management and hardening
• Terraform and Infrastructure as Code
• CI/CD pipeline creation and security integration
• SAST, DAST and container vulnerability scanning
• Compliance frameworks: SOC2, HIPAA, GDPR