Senior DevSecOps Engineer

Responsibilities

• Own the full cloud infrastructure lifecycle across multi-region environments.
• Own and harden the security perimeter across cloud and network boundaries.
• Triage and remediate findings from penetration tests and vulnerability scans in collaboration with external security partners.
• Create and maintain the delivery pipeline from developer machines to production, including automated security checkpoints, secrets scanning, and dependency auditing.
• Support compliance initiatives such as SOC 2, ISO 27001, and NIST through infrastructure controls, audit logging, and evidence collection.
• Optimize network topology for connectivity, latency, and throughput for end users.

Requirements

• 6+ years of relevant DevOps or security experience.
• Deep understanding of AWS security services, including IAM, Security Hub, GuardDuty, SCPs, and network ACLs.
• Strong knowledge of cloud security best practices.
• Experience with network security, including VPNs, firewalls, zero-trust architecture, and ingress/egress protection.
• Linux hardening experience.
• Experience with secrets management using Vault or AWS Secrets Manager.
• Knowledge of PKI and certificate lifecycle management.
• Experience with compliance and audit requirements, including SOC 2, ISO 27001, and CIS Benchmarks.
• Ability to understand penetration testing findings and coordinate remediation efforts.
• Experience with security incident response and risk prioritization.
• Fluent English and Hungarian language knowledge.

Nice-to-haves

• Kubernetes security experience.
• Familiarity with runtime security tooling such as Falco, Wiz, or CrowdStrike.
• Experience reviewing Terraform or other infrastructure-as-code security configurations.
• Exposure to Azure or Google Cloud security.
• Python or Go scripting skills.
• Experience with container security scanning tools.
• Threat modeling experience.
• Security automation experience.