Full-Time Lead DevSecOps Engineer

Founded in 2012, Playson is a leading iGaming supplier. We provide our partners with a high-end, microservice-based Platform-as-a-Service. We are building a Platform & Cloud Security function and are looking for the first hire to launch and lead it.

• Establish the DevSecOps function at Playson.
• Integrate security into CI/CD pipelines (SAST, DAST, dependency scanning, container scanning).
• Harden infrastructure and runtime environments (Linux, Docker, Kubernetes/EKS, RBAC).
• Design and enforce cloud security controls in AWS.
• Define and maintain IaC security policies.
• Implement and manage secrets management solutions.
• Build centralized security monitoring & alerting.
• Lead vulnerability management and threat modeling practices.
• Automate workflows through scripting (Python, Bash).
• Partner with backend, infrastructure, and platform engineers to embed security in design & delivery.
• Contribute to compliance readiness (ISO 27001, GDPR, PCI-DSS).
• Act as a security subject-matter expert.
• Continuously evaluate and implement new security tools and approaches.

• 5+ years in Security Engineering / DevSecOps roles.
• Strong skills in Python and Bash.
• Cloud Security (AWS focus).
• Implementation of security controls in pipelines.
• Hardening of Linux systems, Docker, Kubernetes/EKS.
• Terraform/Terragrunt, including policy-as-code.
• Expertise with HashiCorp Vault, AWS Secrets Manager.
• Hands-on with centralized logging, SIEM/SOAR tools.
• In-depth understanding of secure network design, segmentation, and monitoring.
• Experience with tools enabling temporary, approval-based access.
• Ability to design and enforce zero trust principles.
• Familiarity with SBOM generation, artifact signing, and applying SLSA/in-toto frameworks.
• Understanding of ISO 27001, GDPR, PCI-DSS.

• Exposure to Kafka or ClickHouse.
• Familiarity with GitOps tooling (FluxCD/ArgoCD).
• Broader knowledge of SOC 2, HIPAA, or other regulatory frameworks.

What is the last date for applying to the job?

Which countries are accepted for this remote job?