Senior DevSecOps, Quantstamp

• Background in Computer Science or related field
• 5 years of professional experience as a DevSecOps engineer
• Proven experience in securing AWS-based setups and Kubernetes clusters
• Proven experience with CI/CD pipelines, automation, and TerraForm
• Strong understanding of how PKI works, as well as SSL and TLS protocols
• Hands-on experience with security tools (e.g., OWASP ZAP, Nessus, Qualys)
• Familiarity with SIEM and other security platforms
• Knowledge of relevant regulatory standards (e.g., GDPR, SOC 2, ISO/IEC 27001)

Desirable

• As a Senior DevSecOps Engineer you will bridge our infrastructure and security teams, taking ownership of security-focused initiatives and helping us provide around-the-clock support as part of our on-call rotation
• Implement and manage security tools within our CI/CD pipelines, including DAST, SAST, and container scanning solutions
• Secure our cloud environments with a focus on IAM, secrets management, and workload protection
• Provide expert opinions to inform decisions and assist in evaluating, selecting, and implementing security tools and frameworks (SIEM, CNAPP, SSPM, SOAR, XDR)
• Participate in the existing on-call rotation to maintain 24/7 coverage
• Work closely with team members across APAC, Europe, and North America to ensure seamless integration of security practices
• Detect, mitigate, and respond to security incidents, utilizing log analysis tools and contributing to incident post-mortems
• Participate in our on-call rotation
• Ensure our systems comply with relevant regulatory standards