{"id":1022997,"url":"https://alion.io/job/b2broker-senior-devsecops-engineer-infrastructure-cloud-security","title":"Senior DevSecOps Engineer (Infrastructure & Cloud Security)","company":{"id":56895,"name":"B2BROKER","domain":"b2broker.com","url":"https://alion.io/company/b2broker","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Huntflow","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Cyprus"],"countries":["CY"],"hiring_countries":["CY"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":49000,"max_usd":113000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"WebSockets","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-18T08:28:07Z","employer_posted_date":"2026-09-21","last_verified_at":"2026-11-04T12:23:17Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Responsibilities\nDefine and enforce the security architecture for AWS and Azure: organisation and landing-zone design, service control policies and Azure Policy, network segmentation and private connectivity, encryption and key management (AWS KMS, Azure Key Vault), logging and monitoring baselines.\nOwn the perimeter and edge: WAF and DDoS protection, VPN and zero-trust access, DNS, certificate, and exposure management for anything internet-facing.\nRun vulnerability management end to end: asset discovery, scanning, prioritisation by exploitability and business impact, remediation SLAs tracked with the infrastructure team.\nDesign security into new infrastructure from the start: threat-model and review architecture changes, define secure patterns other engineers can reuse, and say “no” with a workable alternative when needed.\nOwn Active Directory: administrative tiering, privileged-group hygiene, Group Policy and Conditional Access baselines\nDesign and run the group access model: least privilege across AWS IAM, Azure RBAC, Kubernetes RBAC, databases, network devices and SaaS; single sign-on and phishing-resistant MFA everywhere; privileged access management with just-in-time elevation for administrators; tested break-glass procedures.\nOwn the security telemetry pipeline into the SIEM: AWS CloudTrail, AD and Entra sign-in and audit logs; EDR; Kubernetes audit logs; WAF, VPN, network and application logs. Decide what is collected, for how long and at what cost.\nTreat security as code: Terraform modules with secure defaults; policy-as-code (Open Policy Agent, AWS Config rules, Azure Policy) enforced in pipelines and at runtime; drift detection and automatic remediation where safe.\nOwn API security for internal and client-facing APIs (REST, WebSocket, FIX and streaming market-data interfaces): authentication and authorisation patterns, token and key handling, rate limiting and abuse protection, gateway and WAF rules, schema validation, logging of security-relevant events.\nAutomate evidence collection and continuous control monitoring so that ISO 27001 and SOC 2 audits become a by-product of normal operations.\nBe the technical owner of the ISO/IEC 27001:2022 Annex A technological controls (A.8) and of SOC 2 (Security and Availability criteria) control operation. Support internal audits, surveillance audits and SOC 2 Type II fieldwork.\nMap technical controls to DORA: the ICT risk-management framework, the annual digital operational resilience testing programme (vulnerability assessments, penetration tests, scenario tests, readiness for threat-led penetration testing) and the technical inputs to the ICT third-party register.\nRun security reviews of ICT third parties and cloud services. Maintain shared-responsibility and data-flow documentation.\nRequirements\nExperience. 6+ years of hands-on infrastructure, cloud or security engineering, of which 3+ years with security as your primary responsibility, in a regulated financial-services environment - brokerage, trading, payments, banking or crypto services.\nAWS and Azure in production. Security of complex, multi-account / multi-subscription, hybrid estates on both platforms: IAM and RBAC, networking and private connectivity, KMS and Key Vault, logging and native detection services, landing zones and policy enforcement. You have designed infrastructure, not only reviewed it.\nActive Directory. Deep, practical knowledge of AD - tiering, Group Policy, Conditional Access, hybrid identity, the common attack paths and how to close them - plus enterprise IAM and PAM design and access-rights governance.\nDetection and response. You have built and tuned SIEM and EDR detections, owned alerting quality and run security incidents end to end under time pressure. You understand how a Security Operations Center works from the inside - as well as what a SOC 2 report is.\n Automation. Terraform (or equivalent IaC), CI/CD security gates, Kubernetes and container security, policy-as-code, and confident scripting in Python, Bash and PowerShell. You understand APIs well enough to secure them and to automate through them.\n Crypto-asset infrastructure. Hands-on exposure to securing wallet or key-management systems, exchanges or crypto payment rails - HSM or MPC signing, hot/cold segregation, transaction-flow monitoring.\nConditions\nReliability: official employment from the first day, bonuses, annual employee review (salary review or bonus, feedback on work results)\nStability: our clients are in different countries, therefore we are ready for any changes in work of any country\nDevelopment: a lot of projects and products, which means increasing expertise in working with different technologies, or even switching to completely new ones for you within the company\nActive corporate life: we participate in thematic conferences and forums in our cool sphere of business, corporate parties in the best restaurants of the city with participation of stars, etc\nComfort: Offices are in different countries. You can work from anywhere in the world","description_format":"text","description_chars":5033,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Cyprus","iso":"CY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","DevSecOps","Blockchain & Crypto","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-09-18T08:28:07Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.778,"p_room":0.55,"age_days":46,"expected_fill_days":38,"reasons":["conf:3","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/b2broker-senior-devsecops-engineer-infrastructure-cloud-security","json_url":"https://alion.io/job/b2broker-senior-devsecops-engineer-infrastructure-cloud-security.json","meta":{"generated_at":"2026-11-04T15:33:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23783,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":56895},"rest":"https://alion.io/mcp/rest/get_company?id=56895"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fb2broker-senior-devsecops-engineer-infrastructure-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fb2broker-senior-devsecops-engineer-infrastructure-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fb2broker-senior-devsecops-engineer-infrastructure-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/b2broker-senior-devsecops-engineer-infrastructure-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fb2broker-senior-devsecops-engineer-infrastructure-cloud-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1022997}},{"tool":"search_jobs","arguments":{"company":"b2broker.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1022997},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}