DevSecOps Engineer (Cloud Security and Compliance)

Come Back Agency, Mission

Що робити

Infrastructure & CI/CD: Build, scale, and maintain secure cloud infrastructure and automated CI/CD pipelines.
Access & Security: Implement robust access controls, least privilege principles, secrets management, and security hardening across environments.
Observability & Auditing: Standardize logging, monitoring, alerting, and comprehensive audit trails.
Secure SDLC: Drive secure software development lifecycle practices, including code scanning, dependency scanning, and change control.
Incident Response: Establish baseline incident response procedures, including runbooks, on-call expectations, and structured post-incident reviews.

Experience: 2+ years of hands-on DevOps experience managing cloud infrastructure and deployment pipelines.
Cloud & IaC: Strong practical experience with AWS (IAM, networking, compute, logging) and Terraform (Infrastructure as Code).
Containers & GitOps: Hands-on experience with Kubernetes (Amazon EKS preferred), Helm, and GitOps workflows (ArgoCD or similar).
CI/CD: Experience building and configuring CI/CD pipelines from scratch (e.g., Bitbucket Pipelines, GitLab CI, GitHub Actions).
Security & Compliance: Familiarity with modern security tooling (SAST, DAST, dependency scanning, secret scanning), combined with hands-on experience in SOC 2 and/or ISO 27001 compliance preparation (controls implementation, gap analysis, and evidence collection using Security Hub or similar cloud security tooling).