About the role

  • DevSecOps Engineer at ToYou responsible for secure cloud infrastructure and automation. Collaborating with cross-functional teams for security enhancements in software delivery.

Responsibilities

  • Refactor and document employee authentication and authorization systems (SSO, RBAC, MFA).
  • Configure and maintain GitLab security tools and scanners (SAST, DAST, SCA).
  • Integrate and automate AppSec vulnerability scanners across environments.
  • Design and maintain secure inter-service communication and authorization using Istio and related security extensions.
  • Tune and monitor AWS cloud infrastructure in line with CIS and industry best practices.
  • Establish and promote DevSecOps processes, standards, and automation across the company.
  • Conduct security awareness sessions and hands-on workshops for developers and DevOps engineers.
  • Continuously improve the overall security posture through proactive analysis and collaboration with engineering teams.
  • Be responsible for the security tools and services allocated to you.
  • Investigate and resolve complex and high-priority security incidents.
  • Create and maintain playbooks, policies, and custom rulesets to strengthen our security maturity.
  • Contribute to the development of security standards and implement controls to enforce them.
  • Help design and improve strategies to respond to and recover from security incidents and breaches.

Requirements

  • Strong understanding of CI/CD pipelines (GitLab CI preferred).
  • Ability to understand and work with modern development stacks (Java, Go, Python).
  • Experience with AWS security services and Infrastructure as Code (Terraform).
  • Good knowledge of Kubernetes and Helm, including secure deployment practices.
  • Familiarity with container security and service mesh technologies (Istio, Envoy).
  • Solid understanding of application and infrastructure security principles.
  • Proactive mindset, strong communication skills, and passion for automation.
  • Nice to have : Experience in building or leading DevSecOps transformation initiatives.
  • Scripting skills (Python, Bash).
  • Knowledge of SOC 2, ISO 27001, or CIS compliance frameworks.

Benefits

  • Competitive Salary
  • 20 Vacation Days plus Public Holidays
  • Remote work from your preferred location
  • Discounted Language Courses
  • International Team

Job title

Senior DevSecOps Engineer

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job