Remote DevSecOps Engineer: Secure-by-Design & Flexible Hours

BairesDev; Antioquia; A distancia; COP 283.965.000 - 473.276.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote work

USD or local currency compensation

Hardware and software setup

Flexible hours

Paid parental leaves, vacations, and H

Multicultural and mentorship-focused

Descripción de la vacante

BairesDev is seeking a DevSecOps Engineer to unify security with the development lifecycle and serve as the technical authority for secure infrastructure and deployment practices.

You will build automated security gates in CI/CD, enforce security standards with Policy as Code, and integrate scanning tools across containers and IaC. Excellent English is required for global collaboration and remote work.

Formación

• 4+ years of experience in DevSecOps, DevOps or Cybersecurity Engineering.
• Experience integrating security tooling into CI/CD pipelines (Snyk, Trivy, Aqua).
• Proficiency in Policy as Code using Open Policy Agent (OPA) and secrets management.

Responsabilidades

• Design and implement automated security gates within CI/CD pipelines to identify vulnerabilities during the build process.
• Develop and enforce organizational security standards using Policy as Code and advanced secrets management strategies.
• Integrate scanning tools for containers and infrastructure to maintain a secure and compliant production environment.
• Partner with development and operations teams to advocate for secure-by-design principles and remediate security flaws.
• Monitor the security posture of delivery pipelines to proactively manage risks and improve system resilience.

Conocimientos

DevSecOps

CI/CD security

Policy as Code

OPA

Container security

English proficiency

Herramientas

Snyk

Trivy

Aqua

Descripción del empleo

BairesDev is seeking a DevSecOps Engineer to unify security with the development lifecycle and serve as the technical authority for secure infrastructure and deployment practices.

You will build automated security gates in CI/CD, enforce security standards with Policy as Code, and integrate scanning tools across containers and IaC. Excellent English is required for global collaboration and remote work.