DevSecOps Engineer

Department: Delivery Location: Europe Employment type: Full-time Experience: Senior

Description

The company is systematically building out its security and compliance function. We have already launched the SOC 2 and ISO 27001 processes on Drata, with the goal of completing them by the end of Q2. In the mid-term roadmap, we also plan to cover GDPR, HIPAA, and HITRUST.

We are looking for our first dedicated DevSecOps Engineer who will take ownership of this area.

Above all, we are seeking a strong, hands-on engineer, someone who can not only describe security and compliance processes but also independently implement them across infrastructure, CI/CD, Kubernetes, cloud environments, and production services.

This role is not about “paper compliance”. However, working with policies, procedures, and evidence will also be an important part of the responsibility. We need someone who can connect compliance requirements to real technical controls and ensure they are properly implemented, validated, documented, and audit-ready.

Requirements

5+ years of hands-on experience in security / DevSecOps for production infrastructure.
Direct experience with SOC 2 implementation: controls, evidence collection, audit preparation, and communication with auditors. Experience with Drata, Vanta, or a similar compliance automation platform.
Ability to write security policies and procedures yourself — and implement them in a way that actually works in day-to-day operations, not just sits in Notion as a checkbox.
Strong hands-on experience with Docker, Kubernetes, and cloud environments — GCP and/or AWS. This includes IAM, network policies, secrets management, hardening, and production operations, not just theory.