Full-Time Senior Security Engineer

• Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation).
• Perform security-focused infrastructure reviews.
• Implement and maintain monitoring and alerting tools.
• Collaborate with DevOps and Engineering teams to embed security into CI/CD pipelines.
• Partner with Application Security and Engineering to implement security controls.
• Lead initiatives around infrastructure-as-code (IaC) security and runtime protection.
• Assist with threat modeling and risk assessments.
• Collaborate with incident response teams.
• Develop tooling or automation to support proactive remediation.
• Track and report DevSecOps KPIs.

• 3-5 years in DevSecOps, Security Engineering, or similar roles.
• Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS).
• Experience with cloud and container security tooling.
• Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features.
• Proven experience performing secure design and architecture reviews.
• Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines.

• Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane.
• Solid understanding of CI/CD principles and experience with GitHub Actions and ArgoCD.
• Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment.
• Knowledge of database management (SQL and NoSQL).
• Relevant certifications (e.g., Kubernetes and Cloud Native Security Associate, Certified Kubernetes Security Specialist, Google Professional Cloud Security Engineer, AWS Certified DevOps Engineer, AWS Certified Security - Specialty, Certified Kubernetes Administrator).

What is the last date for applying to the job?

Which countries are accepted for this remote job?