Let's grow together and unlock opportunities
DevSecOps
Location
Worldwide
Posted
8 days ago
Salary
0
Seniority
Mid Level
Job Description
DevSecOps
Growe
• Build and own the DevSecOps function (in the security team), defining strategy, roadmap, priorities, and success metrics • Assess the current security posture of applications, infrastructure, cloud environments, and development processes • Design and implement security controls across the software development lifecycle • Establish and maintain secure CI/CD practices, including security gates and automated validation processes • Integrate security checks into engineering workflows with a strong focus on automation and developer experience • Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting • Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments • Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection • Develop Infrastructure-as-Code security standards and policy-as-code controls • Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response • Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams • Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.
Job Requirements
- 2+ years of hands-on experience in DevSecOps, Cloud Security, or Security Engineering
- Experience leading security initiatives, projects, or programs with significant ownership and autonomy
- Proven experience building security processes, tooling, or security programs from scratch
- Hands-on experience integrating security controls into CI/CD pipelines without negatively impacting engineering productivity
- Experience with containerized environments and Kubernetes security
- Experience working with cloud platforms (AWS)
- Practical experience with Infrastructure as Code tools such as Terraform, Helm, or Ansible
- Experience integrating security logs and events with SIEM platforms and supporting detection, monitoring, and incident response use cases
- Ability to balance security requirements with business objectives and engineering velocity
- Experience with Python will be a plus
- English - Intermediate+ or higher
- Ukrainian - Intermediate or higher.
Benefits
- Medical insurance and financial aid
- Benefit Cafeteria (compensation for the gym/stomatology/psychological service & etc.)
- 100 % paid sick leaves
- Paid vacation
- Annual salary review (based on performance)
- Quarter bonuses according to the company’s policy
- Individual annual training budget which allows to visit paid conferences, training sessions, English lessons, workshops, etc.
- Growe University (Leadership Programs, Knowledge sharing, Webinars, etc.)
- Personal development plan
- Corporate events and team-building activities
- Growe Care (Well-being Program)
- Free lunches at the office.
Related Guides
Related Categories
Related Job Pages
More DevOps Engineer Jobs
Role Description Precision Medicine Group is seeking a dedicated professional to join our team. The successful candidate will be responsible for: - Developing and implementing strategic plans. - Collaborating with cross-functional teams to enhance project outcomes. - Monitoring project progress and reporting on key metrics. - Ensuring compliance with industry regulations and standards. Qualifications - Bachelor's degree in a relevant field. - 3+ years of experience in project management. - Strong analytical and problem-solving skills. - Excellent communication and interpersonal abilities. Requirements - Proficiency in project management software. - Ability to work independently and as part of a team. - Strong organizational skills and attention to detail. Benefits - Competitive salary and performance-based bonuses. - Comprehensive health, dental, and vision insurance. - 401(k) plan with company match. - Generous paid time off and holiday schedule. Company Description Precision Medicine Group is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other characteristics protected by law. If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact Precision Medicine Group at myHR@precisionmedicinegrp.com. Recruitment Fraud Warning: Please be aware that fraudulent individuals and websites may impersonate Precision Medicine Group or its affiliates and attempt to obtain personal, financial, or banking information through fake job postings or employment offers. Precision Medicine Group will never request payment, banking details, or other sensitive financial information as part of the recruitment process. If you believe you have been targeted by a recruitment scam, we encourage you to report the incident to your local law enforcement authorities, consumer protection agency, or relevant cybercrime reporting organization in your country. Please also notify us at myHR@precisionmedicinegrp.com so we can investigate and take appropriate action.
• Lead the hardening and modernization of our GitHub ecosystem — consolidating organizations, implementing guardrails and RBAC best practices, and establishing policy-as-code governance at scale. • Assess and evolve the current CI/CD posture — modernizing pipelines, evaluating tooling, and driving toward fully automated secure delivery workflows. • Implement Secure Software Development Framework (SSDF) practices to embed “secure-by-design” principles throughout the SDLC — ensuring supply chain integrity from commit to production. • Act as an SRE for new application infrastructure — building out observability, proactive reliability patterns, performance scaling strategy, and operational readiness. • Design, manage, and automate cloud infrastructure (including container and container orchestration where applicable) through infrastructure-as-code — aligned to NIST CSF 2.0, least-privilege, and zero-trust security models. • Develop and integrate ITSM operational workflows — introducing automation and process maturity where needed to align engineering velocity with auditable controls and resilience. • Promote a culture of security across the organization. • Be able to wear many hats, performing critically required duties as necessary, especially as the team is being developed. • Occasional travel to other offices, customers, and vendor offices
• Investigate and respond to critical incidents • Develop internal solutions using Go and Python • Participate in metric standardization projects • Collaborate with engineering teams • Prepare applications for high-impact events • Contribute to the team's technical refinement • Define and govern standards through RFCs/IRCs • Lead Post-Incident Reviews (PIRs) and GameDays.
Freelance DevSecOps Engineer
WeMatch.Rezono is a performance marketing agency, partnering directly with Meta, Snapchat, Google, Newsbreak. The company provides its clients (publishers, webmasters, arbitrage teams) with ad accounts on all of the platforms mentioned. Moreover, Rezono helps customers optimize campaigns and leverage all the features of platforms to maximize revenue. The company deals with verticals such as home improvement, leadgen, loans, insurance, e-commerce, and mainstream dating.
Role Description Für ein langfristiges Projekt bei einem führenden Unternehmen aus dem Defense-Umfeld suchen wir zwei erfahrene DevSecOps Engineers (2 FTE) zur Einführung und Automatisierung einer modernen Software Factory. Im Fokus steht der Aufbau einer hochautomatisierten DevSecOps-Plattform inklusive einer sicheren CI/CD-Toolchain auf Basis von GitLab, Kubernetes und VMware-Technologien. Project Goal Im Rahmen des Projekts wird eine moderne Software Factory (SWF) auf Basis von R-CASTLE, VMware Cloud Foundation (VCF) und VMware Kubernetes Services (VKS) aufgebaut und weiterentwickelt. Ziel ist die Konzeption, Implementierung und vollständige Automatisierung des Onboardings neuer Softwareprojekte. Hierfür werden zentrale DevSecOps-Komponenten wie: - GitLab - JFrog Artifactory - Xray - HashiCorp Vault/OpenBao - Enterprise-Identity-Lösungen integriert und automatisiert. Darüber hinaus erfolgt die Vorbereitung zukünftiger Kubernetes-Workload-Tenants innerhalb der Plattform. Tasks - Design, Implementierung und Automatisierung neuer Projekt-Onboardings innerhalb der Software Factory - Aufbau und Weiterentwicklung einer standardisierten DevSecOps-Plattform - Administration und Optimierung von GitLab inklusive CI/CD - Integration und Automatisierung von GitLab, Artifactory, Xray und Vault - Implementierung von Infrastructure as Code mittels Terraform - Automatisierung von Plattform- und Onboarding-Prozessen - Integration von Enterprise-Identity-Lösungen (AD/LDAP) - Integration und Migration bestehender Jenkins-Pipelines nach GitLab - Aufbau und Integration zukünftiger Kubernetes-Workload-Tenants - Erstellung technischer Dokumentationen - Durchführung technischer Workshops mit den Fachbereichen Qualifications - MUST HAVE - GitLab - Tiefgehende Erfahrung mit GitLab - Helm Charts - GitLab Groups, Projects und Repositories - GitLab Runner - GitLab CI/CD - Compliance Pipelines - LDAP Integration - Backup & High Availability - GitLab Migrationen - Kubernetes - Sehr gute Kenntnisse in: - Kubernetes - VMware Cloud Foundation (VCF) - VMware Kubernetes Services (VKS) - VMware Tanzu oder vergleichbaren Kubernetes-Plattformen - Ingress - Network Policies - RBAC - Storage - Observability - GitOps - HashiCorp Vault / OpenBao - LDAP Integration - GitLab JWT - Kubernetes Authentication - Policies - Secret Management - Secret Automation - Secure Token Handling - JFrog Artifactory / Xray - Repository Design - Permission Targets - Storage Management - Security Scanning - Retention Policies - Automatisierung - Infrastructure as Code - Sehr gute Terraform-Kenntnisse - Erfahrung mit Terraform-Automatisierungen - Gute Ansible-Kenntnisse - Identity & Security - Active Directory - LDAP - RBAC - PKI - TLS - Enterprise Identity Integration - CI/CD - Jenkins Integration - Migration bestehender CI/CD-Pipelines nach GitLab - Erfahrung mit großflächigen Projektmigrationen - NICE TO HAVE - Argo CD - Flux - Workload Tenant Onboarding - R-CASTLE - VMware VKS Cluster Bootstrap - GitOps Deployment Patterns Soft Skills - Analytische und strukturierte Arbeitsweise - Fähigkeit, Architekturkonzepte in automatisierte Lösungen umzusetzen - Sehr gute Kommunikationsfähigkeiten im Austausch mit Plattform-, Security-, Netzwerk- und Operations-Teams - Erfahrung in der Durchführung technischer Workshops - Ausgeprägte Dokumentationsfähigkeiten - Qualitätsbewusstsein und lösungsorientierte Arbeitsweise - Erfahrung in regulierten oder sicherheitskritischen Projektumgebungen von Vorteil Language Skills - MUST HAVE - Deutsch – verhandlungssicher - Englisch – fließend in Wort und Schrift (mindestens C1) Requirements - Bereitschaft zur einmaligen Hardware-Abholung beim Endkunden - Teilnahme an ca. 1–2 Workshops vor Ort - Bereitschaft zur Unterzeichnung einer Vertraulichkeitsvereinbarung (NDA) - Staatsangehörigkeit eines vom Endkunden freigegebenen Landes (Staatenliste Ausschluss) Application Process Bitte senden Sie uns bei Interesse: - Aktuellen Lebenslauf (Word) - Frühestmöglichen Starttermin - Verfügbarkeit - Stundensatz - Staatsangehörigkeit - Projektreferenzen im Bereich GitLab, Kubernetes und DevSecOps - Kurzbeschreibung vergleichbarer Projekte Wir freuen uns auf Ihre Bewerbung! i.radchenko@wematch.de
