Senior DevSecOps Engineer

Vivid Money; Barcelona; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid/Remote work options

Relocation support to Cyprus

Professional development budget

Paid vacation and sick leave

Sports compensation

Descripción de la vacante

Vivid is hiring a hands-on DevSecOps Engineer to strengthen security in a fully cloud-native AWS environment. You will scale security initiatives, improve cloud and Kubernetes security, and lead vulnerability management with automated, AI-enabled tooling.

You will collaborate with security and engineering teams to embed security into CI/CD, review new services, and govern AI infrastructure security such as gateways and model proxies. Fluent English and strong communication are essential.

Formación

• 5+ years of hands-on experience in DevSecOps, Cloud Security, or related fields.
• Strong hands-on experience operating AWS and Kubernetes in production environments.
• Experience implementing security in Infrastructure as Code and CI/CD workflows.
• Solid understanding of cloud security fundamentals such as access control, secrets management, network security, and encryption.
• Familiarity with container security and common application security risks.
• Deep understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, and agent privilege escalation; hands-on experience securing AI infrastructure components such as LLM gateways, MCP servers, or agent-based workflows.
• Comfortable with scripting and working in Git-based development environments.
• Good communication skills and ability to work effectively with engineering and product teams.
• Comfortable communicating clearly in English, both written and spoken.

Responsabilidades

• Continuously improve the security of our AWS and Kubernetes platforms.
• Strengthen IAM, RBAC, encryption, secrets management, and network controls through secure-by-default policy-as-code.
• Manage edge security, including traffic filtering, WAF configuration, and external exposure management.
• Perform security reviews of new services, architectural changes, and platform components.
• Embed automated security controls into SDLC and CI/CD (SAST, dependency and container scanning, policy enforcement).
• Lead vulnerability management processes, including detection, assessment, prioritization, and reporting.
• Integrate automation and AI-assisted tooling to enhance security reviews and reduce manual effort.
• Define and implement security controls for AI infrastructure components, including gateways, MCP servers, and model proxies.
• Identify and mitigate AI-specific risks such as prompt injection, data leakage, and agent privilege escalation.

Conocimientos

DevSecOps

Cloud Security

AWS

Kubernetes

CI/CD

IaC

AI/LLM security

Scripting

English communication

Herramientas

Git

CI/CD tooling

Descripción del empleo

About The Role

We are looking for a hands‑onDevSecOps Engineerto strengthen and scale security initiatives in our fully cloud-native AWS environment. You will help evolve our DevSecOps practices, improve cloud and Kubernetes security, vulnerability management, and perform security reviews across infrastructure and applications.

You will work closely with security and engineering teams, making hands‑on improvements while contributing to long‑term security direction. We value practical, scalable solutions and smart automation, and we expect ownership and a proactive mindset.

As we actively adopt AI, use LLMs extensively, and build internal AI agents, security must scale alongside innovation and regulatory requirements – making AI‑aware security a key part of this role.

Your Mission

Cloud & Platform Security

• Continuously improve the security of our AWS and Kubernetes platforms.
• Strengthen IAM, RBAC, encryption, secrets management, and network controls through secure‑by‑default policy‑as‑code.
• Manage edge security, including traffic filtering, WAF configuration, and external exposure management.
• Perform security reviews of new services, architectural changes, and platform components.

Application & AI Security

• Embed automated security controls into SDLC and CI/CD (SAST, dependency and container scanning, policy enforcement).
• Lead vulnerability management processes, including detection, assessment, prioritization, and reporting.
• Integrate automation and AI‑assisted tooling to enhance security reviews and reduce manual effort.
• Define and implement security controls for AI infrastructure components, including gateways, MCP servers, and model proxies.
• Identify and mitigate AI‑specific risks such as prompt injection, data leakage, and agent privilege escalation.

Your Profile

• 5+ years of hands‑on experience in DevSecOps, Cloud Security, or related fields.
• Strong hands‑on experience operating AWS and Kubernetes in production environments.
• Experience implementing security in Infrastructure as Code and CI/CD workflows.
• Solid understanding of cloud security fundamentals such as access control, secrets management, network security, and encryption.
• Familiarity with container security and common application security risks.
• Deep understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, and agent privilege escalation; hands‑on experience securing AI infrastructure components such as LLM gateways, MCP servers, or agent‑based workflows.
• Comfortable with scripting and working in Git‑based development environments.
• Good communication skills and ability to work effectively with engineering and product teams.
• Comfortable communicating clearly in English, both written and spoken.

Nice to Have

• Experience scaling security practices in fast‑growing or regulated environments.
• Experience building internal security tooling or automation from scratch.

Why Join Vivid?

• We have a hybrid model in our Limassol office, or fully remote outside office locations.
• We support relocation to Cyprus (visa, package) when needed.
• Competitive senior‑level compensation, reflecting the seniority and impact of the role (depending on location).
• Learning & development budget to support your professional growth.
• Fully paid vacation and sick leave.
• Sports compensation.
• Real growth prospects, significant responsibility, and the ability to make an immediate impact from day one.

Enhance your expertise and shape the future of FinTech. Join Vivid's talented team and help us revolutionize how businesses think about their finances!

Compensation range

Final compensation is determined individually, based on your experience, skills and the scope of the role, assessed against objective, gender-neutral criteria.

About Vivid

At Vivid, we're on a mission to change how businesses and individuals manage their money across Europe. For businesses, we build tools that actually make a difference: multi-IBAN accounts, high-yield savings, business cashback, team cards, and accounting integrations that save real time — all in one place. And for individuals, we offer a simple way to manage and grow your wealth: access to global stocks, ETFs and 150+ cryptocurrencies, cashback, and personalised financial insights.

Our mission? Your success. Everyone deserves the chance to see their finances flourish, and we're dedicated to empowering our customers to make this a reality.

Founded in 2019 in Berlin by Alexander Emeshev and Artem Iamanov, Vivid has quickly grown into one of Germany's top financial platforms for SMEs and private accounts. Since then, we've expanded rapidly across Europe, earning the trust of over 500,000 customers — and with over €200 million raised and a valuation of €775 million, we're just getting started.

We're building Vivid as an AI-native organization — across every function, from product to compliance to operations. Automation handles a growing share of day‑to‑day execution. For us, this means our teams can focus on architecture, strategy, and high-impact decision‑making. This changes how we work: less manual execution, more ownership in building systems that scale. We want to help define what AI-native looks like in a regulated financial environment — and we're looking for people who want to build that future with us.