DevSecOps Engineer | 5 Years | FinTech

We are looking for a skilled DevSecOps Engineer to integrate security throughout the software development and deployment lifecycle. You will work closely with Development, DevOps, Infrastructure and Security teams to build secure, automated, scalable and reliable delivery pipelines.

The role will focus on CI/CD security, cloud and infrastructure security, vulnerability management, container security, security automation and compliance. You will help identify risks early, improve security controls and support the safe delivery of software in a fintech environment.

Key Responsibilities

• Build and maintain secure CI/CD pipelines with automated security checks.
• Integrate SAST, DAST, software composition analysis (SCA) and secrets scanning into development workflows.
• Secure cloud environments, infrastructure, networks, identities and access permissions.
• Automate infrastructure provisioning and security controls using tools such as Terraform or similar.
• Secure Docker containers, Kubernetes clusters and container registries.
• Monitor vulnerabilities, assess their severity and coordinate remediation with engineering teams.
• Define secure coding, deployment and infrastructure practices.
• Manage secrets, encryption, certificates and key-handling processes.
• Support security monitoring, logging, alerting, incident response and recovery.
• Maintain security documentation, control evidence and remediation records.
• Help prepare for security assessments and compliance requirements, such as PCI DSS, ISO 27001 and SOC 2, where applicable.
• Review system designs and proposed changes to identify security risks before release.
• Promote security awareness and practical DevSecOps practices across engineering teams.

Skills and Experience

• Experience in a DevSecOps, security engineering, cloud security or related role.
• Hands-on experience securing CI/CD tools such as GitHub Actions, GitLab CI or Jenkins.
• Practical knowledge of AWS, Azure or Google Cloud security.
• Experience with Docker and Kubernetes security.
• Familiarity with Infrastructure as Code, such as Terraform, CloudFormation or equivalent.
• Experience with security scanning tools for code, dependencies, containers and infrastructure.
• Strong understanding of Linux, networking, identity and access management, and encryption.
• Knowledge of secure software development, OWASP risks and vulnerability management.
• Ability to script or automate tasks using Python, Bash or a similar language.
• Clear communication skills and the ability to work with developers, infrastructure teams and non-technical stakeholders.

Desirable

• Experience in fintech, banking, payments or another regulated industry.
• Knowledge of PCI DSS, ISO 27001, SOC 2 or similar security frameworks.
• Experience with SIEM, cloud security posture management or runtime security tools.
• Relevant cloud or security certifications.

What Success Looks Like

You will help teams detect and resolve security issues earlier, improve the security of cloud infrastructure and release pipelines, and make secure delivery a consistent part of the software development process.

Application Question(s):

• How many years of hands-on experience do you have in DevSecOps, Cloud Security, or Security Engineering?
• Do you have hands-on experience in the FinTech, banking, or payments industry, including security requirements such as PCI DSS, ISO 27001, or SOC 2?
• Do you have practical experience with CI/CD security, AWS/Azure/GCP, Docker/Kubernetes, and automated security scanning tools?

Work Location: In person