{"id":3859468,"url":"https://alion.io/job/devhunt-senior-devsecops-engineer-cloud-security-engineer-fintech","title":"Senior DevSecOps Engineer / Cloud Security Engineer (FinTech)","company":{"id":452668,"name":"Devhunt","domain":"devhunt.ru","url":"https://alion.io/company/devhunt","size_band":"11-50","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"WebSockets","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-06T08:30:07Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-06T07:52:25Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Обязанности: \n Безопасность мультиоблака (AWS и Azure): проектирование архитектуры landing zones, SCP, Azure Policy, сетевой сегментации, приватных каналов связи и управления ключами (AWS KMS, Azure Key Vault);\n\n Защита внешнего периметра: управление WAF, DDoS-защитой, zero-trust доступом, VPN, сертификатами и контролем публичных интерфейсов;\n\n Active Directory и Identity: архитектура админского tiering, аудит привилегированных групп, Group Policy, Conditional Access, гибридная идентификация и устранение типовых векторов атак;\n\n Group Access Model и PAM: соблюдение принципа least privilege в AWS IAM, Azure RBAC, Kubernetes RBAC, базах данных и SaaS; внедрение SSO, устойчивого к фишингу MFA и JIT-элевации прав с регламентами break-glass;\n\n Security Telemetry и SIEM: настройка пайплайнов сбора и приоритизации логов (CloudTrail, Entra/AD, EDR, K8s audit, WAF) в SIEM; тюнинг правил детекции и техническое лидерство при инцидентах;\n\n Security as Code и автоматизация: разработка reusable-модулей Terraform с безопасными дефолтами, внедрение policy-as-code (OPA, AWS Config, Azure Policy) в CI/CD и рантайме;\n\n Безопасность API: защита внутренних и внешних интерфейсов (REST, WebSocket, FIX, streaming) - аутентификация, валидация схем, rate limiting, противодействие абьюзу;\n\n Инженерный комплаенс (ISO 27001, SOC 2, DORA): автоматизация сбора доказательств для аудитов, обеспечение реального функционирования технических контролей безопасности (A.8 ISO 27001:2022, SOC 2 Type II, DORA).\n\n Требования: Общий опыт работы в инфраструктуре, облаках или ИБ от 6 лет, из них от 3 лет строго в роли инженера по информационной безопасности;\n\n Обязателен практический опыт в регулируемом финансовом секторе (трейдинг, брокеридж, банки, платежные системы);\n\n Глубокий hands-on опыт защиты AWS и Azure в продакшене: сложные multi-account / multi-subscription среды, landing zones, IAM/RBAC, KMS/Key Vault;\n\n Экспертное знание Active Directory: tiering, GPO, Conditional Access, векторы атак и механизмы противодействия;\n\n Практика в сфере Incident Detection & Response: настройка SIEM, тюнинг EDR, расследование инцидентов под давлением;\n\n Навыки автоматизации: уверенный Terraform, безопасность контейнеров и Kubernetes, policy-as-code, скриптинг на Python, Bash или PowerShell;\n\n Опыт работы с безопасностью криптовалютной инфраструктуры: понимание HSM/MPC-подписи, изоляции горячих/холодных кошельков, мониторинга транзакционных потоков;\n\n Свободный русский язык (для взаимодействия внутри команды) и уверенный английский язык для документации;\n\n Готовность к работе в гибридном формате (3 дня в офисе) на Кипре или в Дубае (или готовность к релокации).\n\n Условия: Локация: современный офис на Кипре (Лимасол) в формате (3 дня в офисе / 2 дня удаленно);\n\n Релокационный пакет\n\n Уровень дохода: конкурентная заработная плата (обсуждается в индивидуальном порядке);\n\n Масштаб и полномочия: полный ownership над безопасностью сложной глобальной финансовой инфраструктуры;\n\n Команда: сильная инженерная культура без бюрократических согласований каждого скрипта.","description_format":"text","description_chars":3058,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Russian","level":"Advanced (C1)","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Cloud Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-11-06T08:33:39Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:4","agency","win:early"],"computed_at":"2026-11-06T12:43:34Z"},"pay":null,"html_url":"https://alion.io/job/devhunt-senior-devsecops-engineer-cloud-security-engineer-fintech","json_url":"https://alion.io/job/devhunt-senior-devsecops-engineer-cloud-security-engineer-fintech.json","meta":{"generated_at":"2026-11-06T12:43:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23164,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":452668},"rest":"https://alion.io/mcp/rest/get_company?id=452668"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdevhunt-senior-devsecops-engineer-cloud-security-engineer-fintech"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdevhunt-senior-devsecops-engineer-cloud-security-engineer-fintech"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdevhunt-senior-devsecops-engineer-cloud-security-engineer-fintech"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/devhunt-senior-devsecops-engineer-cloud-security-engineer-fintech\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdevhunt-senior-devsecops-engineer-cloud-security-engineer-fintech"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3859468}},{"tool":"search_jobs","arguments":{"company":"devhunt.ru","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3859468},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}