Senior DevSecOps Engineer — Remote, High-Impact Security

BairesDev; Bogotá; A distancia; COP 374.895.000 - 562.342.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work from anywhere

Competitive USD compensation

Home office hardware and software

Flexible hours

Paid parental leave

Descripción de la vacante

BairesDev, a global software company, is seeking a Senior DevSecOps Engineer to weave security into every phase of the SDLC. You will collaborate with development, operations and security teams to make protection a core delivery feature rather than an afterthought.

You will implement automated security tooling in CI/CD, codify policies with Open Policy Agent, manage IaC security and secrets, and review architectures for cloud-native environments.

Formación

• 4+ years in DevSecOps, DevOps, or Cybersecurity Engineering.
• Experience integrating Snyk, Trivy, or Aqua into CI/CD.
• Proficiency with Open Policy Agent (OPA) for policies.
• Secrets management and IaC security experience.
• Cloud-native security and container security expertise.
• Advanced English proficiency.

Responsabilidades

• Integrate automated security scanning and vulnerability tools into CI/CD pipelines.
• Codify security standards and governance with Policy as Code for compliance.
• Develop and maintain secure IaC modules and hardened container pipelines.
• Oversee enterprise secrets management and data protection strategies.
• Conduct threat modeling and architecture reviews for cloud-native environments.

Conocimientos

DevSecOps

Security tooling

Policy as Code

Open Policy Agent

Secrets management

IaC security

Container security

English proficiency

Herramientas

Snyk

Trivy

Aqua

Open Policy Agent

Descripción del empleo

BairesDev, a global software company, is seeking a Senior DevSecOps Engineer to weave security into every phase of the SDLC. You will collaborate with development, operations and security teams to make protection a core delivery feature rather than an afterthought.

You will implement automated security tooling in CI/CD, codify policies with Open Policy Agent, manage IaC security and secrets, and review architectures for cloud-native environments.