DevSecOps Engineer | 5 Years | FinTech

We are seeking a skilled DevSecOps Engineer to embed security throughout the software development and deployment lifecycle. In this role, you will collaborate closely with Development, DevOps, Infrastructure, and Security teams to design and maintain secure, automated, scalable, and reliable delivery pipelines. Your focus will be on CI/CD security, cloud and infrastructure security, vulnerability management, container security, security automation, and compliance. You will play a critical role in identifying risks early, enhancing security controls, and ensuring the safe delivery of software within a fintech environment.

Key Responsibilities

- Build and maintain secure CI/CD pipelines incorporating automated security checks.
- Integrate SAST, DAST, software composition analysis (SCA), and secrets scanning into development workflows.
- Secure cloud environments, infrastructure, networks, identities, and access permissions.
- Automate infrastructure provisioning and security controls using tools such as Terraform or equivalents.
- Secure Docker containers, Kubernetes clusters, and container registries.
- Monitor vulnerabilities, evaluate their severity, and coordinate remediation efforts with engineering teams.
- Define and promote secure coding, deployment, and infrastructure practices.
- Manage secrets, encryption, certificates, and key-handling processes effectively.
- Support security monitoring, logging, alerting, incident response, and recovery activities.
- Maintain security documentation, control evidence, and remediation records.
- Assist in preparing for security assessments and compliance audits, including PCI DSS, ISO 27001, and SOC 2 where applicable.
- Review system designs and proposed changes to identify security risks before release.
- Foster security awareness and practical DevSecOps methodologies across engineering teams.

Required Qualifications

- Proven experience in DevSecOps, security engineering, cloud security, or related roles.
- Hands-on expertise securing CI/CD tools such as GitHub Actions, GitLab CI, or Jenkins.
- Practical knowledge of AWS, Azure, or Google Cloud security best practices.
- Experience with Docker and Kubernetes security.
- Familiarity with Infrastructure as Code tools like Terraform, CloudFormation, or similar.
- Proficiency with security scanning tools for code, dependencies, containers, and infrastructure.
- Strong understanding of Linux systems, networking, identity and access management, and encryption technologies.
- Knowledge of secure software development principles, OWASP risks, and vulnerability management.
- Ability to script or automate tasks using Python, Bash, or comparable languages.
- Excellent communication skills with the ability to collaborate effectively with developers, infrastructure teams, and non-technical stakeholders.

Preferred Qualifications and Benefits

- Experience in fintech, banking, payments, or other regulated industries.
- Familiarity with security frameworks such as PCI DSS, ISO 27001, and SOC 2.
- Experience with SIEM solutions, cloud security posture management, or runtime security tools.
- Relevant cloud or security certifications are highly desirable.

Success in this role means enabling teams to detect and remediate security issues earlier, improving the security posture of cloud infrastructure and release pipelines, and embedding secure delivery as a consistent part of the software development lifecycle.

Application Questions

- How many years of hands-on experience do you have in DevSecOps, Cloud Security, or Security Engineering?
- Do you have practical experience in the fintech, banking, or payments industry, including familiarity with PCI DSS, ISO 27001, or SOC 2 security requirements?
- Can you demonstrate hands-on experience with CI/CD security, AWS/Azure/GCP, Docker/Kubernetes, and automated security scanning tools?

This position requires working on-site.