Job Closed
This listing is no longer active.
An easy to use platform that transfers money from anywhere at any time and solves core pains.
DevOps, AWS, Cybersecurity, Fintech
Location
United States
Posted
87 days ago
Salary
0
Seniority
Senior
Job Description
DevOps, AWS, Cybersecurity, Fintech
Retorna
• Design and strengthen security in multi-account AWS environments, focusing on identity (IAM), networking (VPC, Security Groups) and data protection (KMS, Secrets Manager). • Implement automated security controls in CI/CD pipelines (CodePipeline, GitHub Actions, Terraform). • Configure and maintain AWS native security services: GuardDuty, Security Hub, CloudTrail, Config, Inspector, Macie, WAF, and Shield. • Establish continuous monitoring with CloudWatch, SIEM, and proactive alerts for anomalies or incidents. • Conduct internal pentesting, threat modeling, and security validation on APIs, serverless functions, and critical components. • Lead the detection and incident response (IR) strategy, including playbooks, drills, and basic forensics. • Ensure compliance with fintech regulatory frameworks (ISO 27001, SOC 2, GDPR, PCI DSS). • Collaborate with Platform, Data, and Core teams to ensure a 'secure by default' architecture.
Job Requirements
- 4+ years of cloud security experience, preferably with AWS.
- Proven expertise in advanced IAM, VPC design, KMS, WAF, Shield, CloudTrail, and Config.
- Experience securing infrastructure-as-code (Terraform, CloudFormation, CDK).
- Hands-on experience with DevSecOps, secure CI/CD, vulnerability detection, and log analysis.
- Strong knowledge of applied cryptography, OWASP Top 10, and container and serverless hardening.
- Experience in incident management and response (IR/SOC).
- Ability to communicate security findings clearly and actionably to diverse teams.
- Experience in fintech or regulated environments (banking, payments, crypto).
- Nice-to-have: certifications such as AWS Security Specialty.
- Familiarity with tools like Datadog Security.
- Experience leading Bug Bounty programs or an internal Red Team.
Benefits
- 100% remote work (hybrid option available if preferred)
- Be part of a fast-growing, innovative company
- Collaborative and dynamic team environment
- Professional development opportunities in a multicultural setting
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
Senior Full Stack Engineer – Platform, DevOps
Smart WorkingEmpowering companies to work with the best engineers in the world
• Deliver priority roadmap features across frontend and backend systems • Develop and maintain applications using Node.js, React, and TypeScript • Support and enhance NHS and third-party integrations • Contribute to scalable, reusable platform architecture • Maintain and optimise cloud infrastructure (AWS preferred) • Build, maintain, and improve CI/CD pipelines and release processes • Improve monitoring, logging, and system observability • Strengthen deployment reliability and platform stability • Implement and support security improvements and secure coding practices • Ensure alignment with compliance standards (e.g., GDPR, ISO27001) • Improve engineering quality and release discipline by: Reducing defect leakage, Strengthening testing practices and • Supporting test-first / automated testing approaches • Collaborate with Product and stakeholders to translate complex requirements into pragmatic technical solutions • Work across multiple concurrent workstreams and manage priorities effectively
• Design, build, and maintain CI/CD pipelines for automated testing, building, and deployment • Manage and optimize cloud infrastructure (AWS, GCP, or Azure) using Infrastructure as Code (Terraform preferred) • Implement and maintain containerised environments using Docker and Kubernetes • Set up and manage monitoring, alerting, and logging systems (e.g., Prometheus, Grafana, ELK, Datadog) • Improve system reliability, scalability, and performance , ensuring high availability and SLA compliance • Automate operational processes and reduce manual intervention (toil reduction) • Manage database infrastructure , including backups, replication, scaling, and disaster recovery • Enforce security best practices (IAM, secrets management, network policies, vulnerability scanning) • Collaborate with engineering teams to improve developer experience (local setups, CI/CD speed, debugging tools) • Participate in on-call rotations , incident response, and postmortem analysis
DevSecOps
Gedanken - GCertificaPlataforma #1 de Onboarding (cadastro, homologação e DDI), gestão de risco e performance de fornecedores.
• Work cross-functionally with teams, promoting a DevSecOps culture throughout the entire development lifecycle; • Implement and monitor security controls for applications, APIs, infrastructure, and cloud environments; • Support the evolution of security practices without compromising the teams' agility. • Enhance pipelines and processes with a focus on automation, quality, and security; • Support the implementation of secure CI/CD and versioning best practices; • Contribute to the continuous improvement of the platform's infrastructure and architecture. • Manage identity and access (IAM), including authentication and authorization; • Work with tools such as Keycloak and integrations between systems; • Ensure security best practices for APIs and integrations. • Support incident troubleshooting and root cause analysis; • Propose and implement preventive improvements; • Document standards, processes, and best practices for the teams; • Assist squads in adopting more secure and efficient practices.
• Resolving Incidents • Deploying new versions of software • Database Upgrades • Improving monitoring dashboards, alerting, etc. • Daily, Weekly, Monthly Check Lists • Onboarding new customers • Disaster Recovery Testing • High Availability Testing • Cost Optimisations • Implement and Own the observability platform, in collaboration with the engineering team. • Create & Contribute to monitoring dashboard • Create & Contribute to monitoring capability • Contribute to Improvements of the platform • Enhance or fix automation • Design, Contribute, Implement & Own operational processes. • Assign tasks to engineers as required • Line Management of the team, including hiring, performance reviews, etc. • Work with the Engineering Team Lead to improve the platform • Be part of an on-call group (team lead, escalation level) • Work with customers as required to resolve their issues • Collaborate with Internal development teams as required




