DevSecOps Lead

We are looking for an experienced DevSecOps Lead to take ownership of our information and infrastructure security, build robust DevSecOps practices, and elevate the security of our On-prem infrastructure to the next level.

If you have deep expertise in Security Engineering, hands-on experience with Linux hardening, CI/CD security, and a passion for building secure, scalable systems — we’d love to connect with you!

💻 What You Will Do:
On-prem Infrastructure & Systems:
Perform Linux server hardening, manage patch management, and enforce strict access controls.
Manage secrets, certificates, PAM, backups, and Disaster Recovery (DR) strategies.
Network Security & Scanning:
Configure and manage network segmentation, Firewalls, VPNs, IDS/IPS, and WAF.
Conduct regular network and vulnerability scans, ensuring timely remediation.
Pentesting & Internal Audits:
Coordinate external pentesting: define scope, select vendors, oversee testing, and manage re-testing.
Perform hands-on internal security checks using Burp Suite, ZAP, and Metasploit.
Secure SDLC & Code Security:
Implement SAST, DAST, SCA, and secrets detection directly into CI/CD pipelines.
Conduct secure code reviews and train developers on OWASP security standards.
Monitoring, Incidents & Compliance:
Build and maintain SIEM solutions, log management, alerting, and incident response processes.
Prepare infrastructure and operational processes for annual PCI DSS audits; maintain security policies and documentation.

🎯 What We Are Looking For (Must-have):
3+ years of experience in DevSecOps, SecOps, or Security Engineering (or DevOps with a strong security focus).
Deep experience with On-prem Linux servers (this is our core stack).
Strong Networking expertise: TCP/IP, DNS, routing, firewalls, VPNs, and network segmentation.
Hands-on experience with network and vulnerability scanning tools (Nmap, Nessus / OpenVAS).
Experience organizing or conducting penetration tests.
Integration of code security tools into CI/CD pipelines (SonarQube, Semgrep, Snyk, Trivy, Gitleaks, etc.).
Scripting proficiency in Bash / Python.
Upper-Intermediate English or higher (for documentation and communicating with external auditors).

➕ Nice to Have:
Familiarity with PCI DSS, ISO 27001, or SOC 2 compliance frameworks.
Industry certifications (OSCP, CEH, CISSP, Security+).
Hands-on experience with Docker, Kubernetes, Ansible, Terraform, and SIEM tools (Wazuh, ELK, Splunk).
Experience in Fintech, Payments, E-commerce, or Travel domains.

🚀 What We Offer:
Responsible and high-impact tasks with the opportunity to shape the security architecture of a high-load product.
Flexible working hours and comfortable working conditions.
Professional growth support.
A supportive, tech-driven team without unnecessary bureaucracy.

📩 Ready to take on the challenge? Send over your CV, and let’s get in touch!