DevSecOps Engineer - Remote Work

BairesDev; Rio de Janeiro; Remote; BRL 180,000 - 260,000; Full time

Benefits offered by this job

Remote work

USD or local currency compensation

Home office setup

Flexible hours

Parental leave

Global team culture

Mentorship & growth

Job summary

BairesDev is seeking a DevSecOps Engineer to unite security with the development lifecycle in a 100% remote, globally distributed team.

You will implement automated security gates, enforce security standards with Policy as Code, and integrate scanning tools like Snyk, Trivy, and Aqua throughout CI/CD pipelines.

Qualifications

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Proven expertise integrating security tooling (Snyk, Trivy, Aqua) into CI/CD pipelines.
• Proficiency in Policy as Code using Open Policy Agent (OPA) and secrets management.
• Deep understanding of container security and IaC best practices.
• Advanced proficiency in English.

Responsibilities

• Design and implement automated security gates in CI/CD pipelines to identify vulnerabilities during builds.
• Develop and enforce security standards using Policy as Code and secrets management strategies.
• Integrate scanning tools for containers and infrastructure to keep production secure and compliant.
• Collaborate with development and operations to promote secure-by-design principles and remediation.
• Monitor security posture of delivery pipelines to manage risks and improve resilience.

Skills

DevSecOps/DevOps experience

Security tooling integration

Policy as Code (OPA)

Container security

English proficiency

Tools

Snyk

Trivy

Aqua

Job description

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

DevSecOps Engineer at BairesDev

As a DevSecOps Engineer, you will unify security with the development lifecycle, ensuring that protection is built directly into our automated workflows. You will serve as the technical authority for secure infrastructure and deployment practices, balancing release velocity with robust defensive layers.

What You’ll Do:

• Design and implement automated security gates within CI/CD pipelines to identify vulnerabilities during the build process.
• Develop and enforce organizational security standards using Policy as Code and advanced secrets management strategies.
• Integrate scanning tools for containers and infrastructure to maintain a secure and compliant production environment.
• Partner with development and operations teams to advocate for secure-by-design principles and remediate security flaws.
• Monitor the security posture of delivery pipelines to proactively manage risks and improve system resilience.

What we are looking for:

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Proven expertise in integrating security tooling such as Snyk, Trivy, or Aqua into CI/CD pipelines.
• Proficiency in implementing Policy as Code using Open Policy Agent (OPA) and managing secrets.
• Deep understanding of container security and Infrastructure as Code (IaC) best practices.
• Advanced proficiency in English.

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.