🔐 Vacancy: DevSecOps Engineer (Senior)

Location: EU (Remote) Rate: $30/hour Format: Full-time / Contract

About the Project

We are building a secure, scalable cloud platform that meets high compliance standards (SLSA Level 3–4). We need an engineer who will embed security into the CI/CD pipeline, harden AWS infrastructure, and help us pass security audits and certifications.

This is not just "DevOps with a security twist." This is a true DevSecOps architect role — you will own the security of the entire software delivery lifecycle.

What You'll Actually Do

🛡 CI/CD Security

• Implement SAST/DAST, vulnerability scanning, dependency auditing, and artifact signing
• Build SLSA Level 3–4 compliance (provenance, SBOM, attestations)
• Secure the software supply chain from commit to production

☁️ AWS Security & Hardening

• Manage IAM, Security Groups, AWS Organizations, GuardDuty, WAF, Inspector
• Apply security-by-design principles to Infrastructure as Code (AWS CDK / Terraform)
• Design multi-account logging, auditing, and centralized security monitoring

🕵️ Incident Response & Observability

• Lead security incident investigations, coordinate remediation, and run post-mortems
• Monitor security events and system health via GuardDuty, Security Hub, DataDog/Sentry, CloudWatch

📦 Dependency & Registry Security

• Control third-party dependencies, enforce package registry security policies
• Automate vetting of new libraries and prevent vulnerable components from reaching production