Security DevOps Engineer, Moloco

• 3+ years of experience as a DevOps Engineer or in a similar role with a strong foundation in CI/CD, automation, and cloud infrastructure
• Strong understanding of cloud security principles (AWS, GCP, or Azure)
• Experience securing CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins, Harness)
• Familiarity with infrastructure-as-code and related security tools
• Proficiency in scripting languages (Python, Bash, etc)
• Hands-on experience with container security (e.g., Docker image scanning, Kubernetes best practices)
• Knowledge of IAM, secrets management, and secure key handling
• Experience with vulnerability scanning and remediation workflows
• Ability to identify and mitigate misconfigurations in cloud and IaC environments
• Comfortable collaborating with DevOps, platform, and application teams

Desirable

• We're looking for a Security DevOps Engineer to enhance the security posture of our existing cloud infrastructure and applications
• This role plays a critical part in proactively identifying risks, automating security controls, and ensuring our systems remain resilient and compliant as we grow
• Integrated Security: Embeds automated security testing (SAST/DAST) into CI/CD pipelines to identify vulnerabilities early
• Secure Infrastructure: Implements safeguards across infrastructure-as-code, containers, and cloud environments to minimize risk from misconfigurations or unintended use
• Threat Management: Automates vulnerability scans and real-time threat responses to reduce risks. Participate in security triage and vulnerability management process
• Compliance: Ensures adherence to standards like SOC 2 or GDPR within DevOps processes
• Efficiency: Automates manual security tasks, accelerates development, and reduces delays caused by late-stage fixes
• Resilience: Builds robust defenses against evolving threats with incident response playbooks and threat intelligence