Senior DevSecOps Engineer

• Design, secure and operate AWS infrastructure (EKS/ECS, Lambda, S3, RDS, VPC, IAM)
• Own cloud security, including least-privilege IAM, encryption, secrets management, network segmentation and threat detection
• Harden production Kubernetes with RBAC, network policies, pod security standards, admission control and runtime security
• Manage infrastructure as code with Terraform, including policy-as-code and security guardrails
• Build CI/CD pipelines with integrated SAST, dependency scanning, container image scanning and signing, and secret detection
• Own monitoring, logging and alerting
• Lead incident response, including security incidents and post-mortems
• Run vulnerability management and patching, and remediate audit findings
• Support data and AI/LLM workloads securely
• Keep cloud costs in check
• Work closely with Python backend, data and AI teams

• 5+ years in DevOps / SRE / platform engineering, with 3+ years running AWS and Kubernetes in production
• Hands-on production experience in cloud and infrastructure security (IAM, KMS/secrets, network security, GuardDuty / Security Hub)
• Kubernetes in production, including Kubernetes security (RBAC, network policies, pod security)
• Experience with AWS: EKS, ECS, Lambda, S3, RDS, VPC
• Terraform / infrastructure as code
• Secure CI/CD and DevSecOps tooling (SAST, image and dependency scanning)
• Observability and incident response (Prometheus, Grafana, ELK / CloudWatch)
• Docker / containerization
• Scripting in Python and Bash
• Strong Linux and networking fundamentals
• Based in Poland
• Fluent English
• Nice to have: AWS Security Specialty, CKS, CISSP certifications; SOC 2 / ISO 27001 compliance experience; SIEM tooling; threat modeling; ArgoCD / GitOps; infrastructure for ML/LLM workloads; FinOps / cloud cost optimization