Security-First DevSecOps Engineer: Automate & Protect Cloud

Deel; España; Presencial; EUR 74.000 - 96.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Stock grant opportunities

Flexible office membership

Disability accommodations available

Descripción de la vacante

Deel is seeking a DevSecOps Engineer to advance security across our global platform from Spain. You will lead automation, secure infrastructure design, and monitoring efforts while collaborating with cross‑functional teams to embed security into development.

You will work on threat modeling, IaC scanning, and cloud security, contributing to a scalable, compliant, and resilient product used by customers worldwide.

Formación

• 3+ years in Security, SecOps, or DevSecOps roles.
• Hands-on experience creating, identifying and fixing infrastructure misconfigurations using policy-as-code and IaC security scanning tools such as Checkov, tfsec, or Terrascan.
• Basic programming skills in JavaScript, TypeScript, Python; experience with version control (e.g., Git) and CI/CD pipelines.
• Manage and tune WAF and firewall configurations (e.g., Cloudflare or equivalent) to protect.
• Familiarity with security principles, standards, and best practices, including common vulnerabilities (e.g., OWASP Top 10), secure coding, encryption, authentication, access control, and security testing.
• Proficiency in methodologies and tools, including understanding CI/CD pipelines, infrastructure automation (e.g., Docker, Kubernetes), configuration management, and monitoring/observability.
• Ability to assess risks and apply security controls, encompassing an understanding of threat modeling, risk assessment techniques, vulnerability management, and incident response planning.
• Effective collaboration with cross‑functional teams (developers, security, operations), promoting security practices, and integrating security seamlessly into the development process.
• Proficiency in automation tools; knowledge of security scanners (e.g., SAST, DAST), vulnerability management systems, log analysis tools, and security‑focused frameworks for automating security processes.
• While not mandatory, possessing relevant security certifications is considered advantageous, enhancing credibility and demonstrating commitment to security practices.

Responsabilidades

• Security Automation: Develop and maintain automated security tools and processes to identify vulnerabilities, perform code analysis, monitor systems and conduct security testing.
• This includes integrating security scanners, static code analysis tools, and vulnerability assessment tools into the CI/CD pipeline.
• Secure Infrastructure: Design and implement secure cloud infrastructure, network architecture, and deployment processes with access controls, encryption, and monitoring.
• Continuous Monitoring: Implement security monitoring tools to identify and respond to security events and anomalies, including log analysis and intrusion detection.
• Collaboration and Communication: Act as liaison between development, operations, and security teams to integrate security requirements.
• Compliance and Auditing: Assist in compliance assessments and audits and provide required documentation of security controls.

Conocimientos

Security

DevSecOps

IaC security

Python

JavaScript

Git

CI/CD

Cloud security

Kubernetes

Threat modeling

OWASP

Herramientas

Checkov

tfsec

Terrascan

Descripción del empleo

Deel is seeking a DevSecOps Engineer to advance security across our global platform from Spain. You will lead automation, secure infrastructure design, and monitoring efforts while collaborating with cross‑functional teams to embed security into development.

You will work on threat modeling, IaC scanning, and cloud security, contributing to a scalable, compliant, and resilient product used by customers worldwide.