Senior DevSecOps

Що робити

• Assess the security of websites, APIs, infrastructure, access controls, and data; develop a risk register and remediation plan aligned with business priorities.
• Design and implement technical security controls, defining how they will be maintained and monitored.
• Configure and maintain Cloudflare, WAF, rate limiting, and bot management rules; investigate suspicious traffic while preserving access for users, partners, and legitimate search engine crawlers.
• Introduce security scanning for code, dependencies, secrets, and running applications; integrate checks into CI/CD, validate findings, and coordinate vulnerability remediation.
• Work with DevOps to strengthen the security of servers, network equipment, cloud services, and databases through access controls, secrets management, logging, and secure configurations.