Senior DevSecOps Engineer - Berlin / Lisbon / Warsaw

1GLOBAL; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

1GLOBAL is seeking a Senior DevSecOps/Cloud Security Engineer to strengthen and automate security across cloud and hybrid infrastructure. You will embed security into design and deployment, lead security controls in AWS, and harden Kubernetes environments.

Based in Berlin, Lisbon or Warsaw, relocation is required if not in these cities. You will collaborate with development, DevOps and IP teams to ensure secure-by-default practices and drive security-first culture.

Qualifications

• 3+ years of Cloud Security/DevSecOps experience.
• Strong AWS security fundamentals (IAM, KMS, GuardDuty, Config, Security Hub).
• Hands-on Kubernetes security (RBAC, NetworkPolicies, image scanning).
• Automation scripting (Python or Bash).

Responsibilities

• Design, implement and evolve scalable cloud security controls across AWS multi-account environments.
• Own Kubernetes security architecture including RBAC, PodSecurity, and network segmentation.
• Embed security automation into CI/CD pipelines with image scanning and IaC validation.
• Continuously assess cloud and Kubernetes for vulnerabilities and misconfigurations.
• Maintain IAM and secrets management with least-privilege access.
• Collaborate with DevOps, Platform and IP teams to deliver security as code.
• Produce documentation: security architectures, runbooks, incident playbooks.
• Promote secure engineering culture and act as security champion.

Skills

Cloud Security

DevSecOps

AWS Security

Kubernetes Security

Infrastructure as Code

Python

Bash

Terraform

Git

Docker

Networking

Threat Detection

Tools

Git

Docker

Terraform

Kubernetes

Job description

About Us
1GLOBALis a technology-driven global mobile communications provider, delivering global connectivity solutions to enterprises and consumers. Powered by a best-in-class telecom platform – including its own owned and operated global mobile core network, fully fledged in-house developed eSIM technology, and an extensive portfolio of telecom licenses – 1GLOBAL operates as a fully regulated telecommunications provider across 40 countries worldwide.

We serve many of the world’s leading banks, enterprises, and digital-first businesses, including neo-banks, global fast moving consumer goods companies, travel leaders, and payment service providers. Today, 1GLOBAL connects more than70 million people and devices globally, enabling our customers to launch, scale, and innovate with confidence in the mobile ecosystem.

1GLOBAL is a profitable, fast-growing business. With full-year revenues in 2025 exceedingUS$200 millionand profits of overUS$25 million, we generate strong cash flows to fund our growth allowing us to continuously invest in infrastructure, platform innovation, and global expansion. Recent years have marked a defining phase in our journey, with major enterprise and mass-consumer client wins accelerating our evolution into a global mobile connectivity powerhouse, purpose-built to enable consumer brands to enter and succeed with their own aspirations to offer telecommunications services to their clients.

Founded in 2022 by experienced technology entrepreneurs,Hakan KoçandPyrros Koussios, 1GLOBAL has rapidly emerged as a European technology leader shaping the future of global telecommunications. We operate as a fully regulated Mobile Virtual Network Operator (MVNO) in 12 countries and as a regulated telecom operator in an additional 28 markets. Headquartered in the Netherlands, with world-class R&D hubs in Lisbon, Berlin, and São Paulo, our team of close to500 experts across 15 countriesis united by a single ambition: to redefine global mobile connectivity through technology, scale, and execution excellence.

About the Ideal Candidate

We are looking for a talentedSeniorDevSecOps/ Cloud Security Engineerto join our Technology Department, with a focus on strengthening and automating our security posture across cloud and hybrid infrastructure.
As aDevSecOps/Cloud SecurityEngineer, you willbe responsible forembedding security into every stage of our infrastructure lifecycle, from design to deployment. You will lead the implementation of cloud-native security controls in AWS, harden Kubernetes environments, and drive best practices across CI/CD pipelines. Your role includes continuous vulnerability management, network protection,monitoring forthreats, and working with development,DevOpsand IP teams to ensure secure-by-default practices.You’llalso proactivelyidentifyrisks, secure network perimeters, and automate remediation wherever possible.
This role can be based in our Berlin, Lisbon, or Warsaw offices. Relocation is required if you are not currently based in one of these cities.

About the Role

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation
• Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats
• Design and maintain strong IAM and secrets management practices, enforcing least-privilege access
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection where required
• Ensure alignment with internal security policies and external frameworks (CIS, NIST, ISO 27001, etc.)
• Produce and maintain clear documentation, including security architectures, runbooks, and incident response playbooks
• Act as a security champion, driving best practices, awareness, and secure engineering culture across teams

About You

• A minimum of3+yearsof experience with Cloud Security /DevSecOps/ Infrastructure Security
• Strong AWS security fundamentals (IAM, KMS,GuardDuty, Config, Security Hub)
• Solid Linux security and cloud networking fundamentals
• Hands-on Kubernetes security (RBAC,NetworkPolicies, pod security, image scanning)
• Infrastructure as Code (Terraform) and Git-based workflows
• Scripting for automation (PythonorGoorBash)
• Experience with vulnerability management and container security
• Security-first mindset with strong troubleshooting skills
• Experience with WAFs and cloud DDoS protection
• Comfortable withpacket inspection, flow analysis,and traffic monitoring (tcpdump, Wireshark, Suricata, etc.)

Why 1GLOBAL?

• Growth Opportunities:Advance your career in one of the fastest growing telecommunications companies, expanding over 100% year-on-year under the leadership of successful tech entrepreneurs.
• Major Transaction Exposure:Be in the driver’s seat for transactions that will have an impact on the future telco industry.
• Work with a Talented Team:From the Board and the Founders to the Senior Management Team, you will collaborate daily with the most capable and renowned external advisors, and constantly being exposed to talented and driven individuals.
• Dynamic Work Environment:Thrive in a collaborative, fast-paced workplace where innovation is encouraged, and every contribution counts.
• Professional Development:Work alongside industry experts to enhance your skills and knowledge in a cutting‑edge field.
• International Experience:Gain opportunities to work in different 1GLOBAL offices around the world as you grow within the company.
• Open Communication Culture:Join a team where your ideas are heard, and open dialogue is encouraged, fostering a supportive and transparent work environment.
• Get Things Done Attitude:Be part of a results-driven team that values efficiency, creativity, and the drive to make a tangible impact in the industry.

1GLOBAL is an equal opportunity employer, we value your character as much as your talent. Diversity drives our innovation, and we offer a collaborative, dynamic, and international work environment. We are excited for you to join our mission to revolutionise connectivity globally.