Текст заказа
The Product Security team is looking for a DevSecOps Engineer to strengthen security across the software development lifecycle. The role focuses on security tooling within CI/CD pipelines: making scanners effective and developer-friendly, automating routine workflows and ensuring that real risks are identified and remediated.
This is a hands-on position with a high level of autonomy and direct influence on how security checks are designed, rolled out and tuned across the engineering environment. The role involves close collaboration with AppSec, Cloud Security, DevOps, Platform and product engineering teams.
Responsibilities
Integration and maintenance of SAST, SCA and secrets scanning across CI/CD pipelines and developer workflows
Development of reusable pipeline integrations and security rules as code, including cloud configuration checks in collaboration with Cloud Security and DevOps
Safe rollout of changes together with pipeline owners and tracking of security coverage across pipelines
Tuning of scanner rules and configurations to reduce false positives and provide actionable feedback to developers, without masking real risks
Troubleshooting of failed scans and broken integrations, timely restoration of controls and escalation of blockers
Automation of the findings lifecycle: collection, deduplication, ticket creation and status tracking, ensuring every High finding has an owner and a due date
Collaboration with AppSec and development teams on finding validation, remediation guidance and conversion of recurring issues into automated checks
Proposals for new security gates, tools and improvements to exception handling
Maintenance of runbooks and coverage reports, as well as knowledge sharing across the team
Requirements
Proven experience in end-to-end ownership of security tooling in production CI/CD pipelines: design, rollout and ongoing maintenance of integrations
Strong knowledge of Git workflows and CI/CD pipelines, including design of reusable integrations, investigation of failed jobs and assessment of change impact on delivery
Practical experience configuring and tuning SAST, SCA and secrets scanning tools, as well as routing results to responsible teams
Solid automation skills in Python, Bash, Go or a similar language, including API integrations; reliability and maintainability are prioritized over a specific language
Experience implementing security checks or policies as code, with version control, testing and controlled rollouts
Hands-on experience securing and hardening environments across major cloud providers, including automated compliance checks
Working knowledge of Linux and containerized build environments: permissions, credentials, logs
Solid understanding of application, dependency and exposed-secret risks; ability to distinguish a tool failure from a security finding and identify cases requiring specialist review
Ability to work independently, take ownership of technical decisions and coordinate effectively with cross-functional teams
Upper-Intermediate English proficiency and higher
Fluent Ukrainian
Will be a plus
Experience with AWS GitLab CI/CD security integrations
Terraform or Kubernetes security checks
Software supply-chain security: SBOMs, artifact signing, build provenance
DAST integration or use of AI-assisted tools in security automation with appropriate review
Background in fintech, trading, payments or other security-sensitive product environments
We offer
20 paid vacation days per year
10 paid sick leave days per year
Public holidays as per the company's approved Public holiday list
Medical budget
Opportunity to work remotely
Professional education budget
Language learning budget
Wellness budget (gym membership, sports gear and related expenses)