Senior DevSecOps Engineer

• Launch, monitor, and analyze scans across code, dependencies, containers, and IaC
• Triage findings and prioritize them based on real risk rather than only CVSS
• Independently remediate vulnerabilities by updating dependencies, applying patches, hardening Docker/Kubernetes/IaC configurations, and creating repository pull requests
• Coordinate complex fixes with development teams
• Monitor SLA compliance and verify remediation through re-scans
• Administer and maintain integrated SAST, DAST, SCA, and Secret Scanning tools
• Process security alerts and investigate false positives
• Review logs and work with existing SIEM/Wazuh rules
• Escalate incidents to the SOC when needed
• Tune existing WAF/Cloudflare rules according to established procedures

• Hands-on experience with vulnerability management
• Experience with vulnerability scanners such as Trivy, Snyk, SonarQube, Semgrep, OWASP ZAP, and Gitleaks, and understanding of how they work
• Practical remediation skills, including updating packages, modifying Dockerfiles, changing Terraform/Helm, and creating basic code pull requests
• Ability to create basic code PRs in Python, JavaScript, or another language
• Confidence with Bash and Python for automating routine tasks and interacting with scanner APIs
• Practical experience with Docker and Kubernetes
• Understanding of CI/CD pipelines such as GitLab CI, GitHub Actions, or Jenkins
• Basic understanding of cloud infrastructure and networking, including AWS/GCP/Azure, IAM, TLS, DNS, network segmentation, and firewall principles
• Strong communication skills for assigning tasks, explaining finding criticality, and justifying remediation
• Experience with Vault, SIEM, Cloudflare WAF/rate limiting, and OWASP Top 10 is a plus, not required

• Compensation for external courses and conferences
• Access to the corporate library
• Flexible schedule with start time anytime between 8:00–11:00 Kyiv time
• Choice of Kyiv office, coworking in Lviv or Warsaw, or fully remote work
• 28 working days of paid vacation per year
• Up to 30 days of sick leave with medical confirmation
• All state holidays
• Medical insurance
• Compensation for psychologist sessions
• Ukrainian Victory Support program and other social initiatives
• Regular online or offline team-building activities