Staff DevSecOps Engineer: Cloud Security & CI/CD

Spin; Hermosillo; Presencial; MXN 1.200.000 - 1.900.000; Jornada completa

Descripción de la vacante

Spin is seeking a Staff SecDevOps Engineer to drive security across fintech platforms. You will embed automated security testing in CI/CD, harden cloud and container environments, and partner with teams to shift security left while preserving availability and data integrity.

You will mentor junior engineers, influence cross-functional security practices, and shape the security roadmap with strategic tool evaluations.

Formación

• 8+ years in Information Security, DevOps, or Platform Engineering, preferably fintech or tech.
• Hands-on CI/CD with security testing integrated into pipelines.
• Expert in Terraform/CloudFormation and CSPM practices.

Responsabilidades

• Embed automated security testing into build and deployment pipelines.
• Define and enforce security guardrails for IaC and cloud workloads.
• Design tooling for vulnerability detection and remediation workflows.
• Develop and enforce security policies across cloud, CI/CD, and on-prem environments.
• Oversee security monitoring (SIEM) and lead incident response and root-cause analysis.
• Lead audits for compliance with NIST, ISO 27001, OWASP, etc.
• Mentor engineers in secure coding and DevSecOps practices.
• Contribute to the security roadmap and evaluate new tools.

Conocimientos

CI/CD & DevSecOps

Automation scripting

Cloud security

IaC & policy-as-code

Secrets management

Incident response

Communication

Problem solving

Execution under pressure

English proficiency

Educación

Bachelor's degree in Systems Engineering/CS/IT

Herramientas

Terraform

CloudFormation

Kubernetes

Checkov

tfsec

Jenkins

GitHub Actions

GitLab CI

Descripción del empleo

Spin is seeking a Staff SecDevOps Engineer to drive security across fintech platforms. You will embed automated security testing in CI/CD, harden cloud and container environments, and partner with teams to shift security left while preserving availability and data integrity.

You will mentor junior engineers, influence cross-functional security practices, and shape the security roadmap with strategic tool evaluations.