Senior DevSecOps & Infrastructure Security Engineer

NewMind AI; Şişli; On-site; TRY 180,000 - 300,000; Full time

Job summary

New Mind AI is seeking an experienced DevSecOps & Infrastructure Security Engineer to reinforce security across SaaS platforms, on-prem deployments, and Kubernetes/OpenShift environments. You will own security initiatives end-to-end, assess architectures, and guide engineering teams on mitigations.

The role requires 5+ years in security-focused roles, strong Linux/network security knowledge, hands-on Kubernetes/OpenShift, and expertise in CI/CD security, SAST, SCA, and secret management.

Qualifications

• 5+ years of professional experience in DevSecOps, Infrastructure Security, Platform Security, Cloud Security, or related fields.
• Strong Linux and network-security knowledge, with production experience in Kubernetes/OpenShift and CI/CD security.
• Practical experience with SAST, SCA, secret scanning, vulnerability-management processes, IAM, PAM, RBAC, TLS/mTLS, PKI, and CIS CIS Benchmarks.
• Familiarity with Policy & Supply Chain tooling (Kyverno, OPA Gatekeeper, Cosign) and runtime security (Falco, Tetragon).
• Experience with automation (Ansible, Terraform) and monitoring (Splunk/SIEM).

Responsibilities

• DevSecOps & Secure SDLC: Improve security controls across CI/CD, SAST, SCA, secret scanning, container/IaC scanning, SBOM; build automated security gates.
• Kubernetes/OpenShift Security: Assess environments, improve RBAC, PSP, NetworkPolicy and namespace isolation; policy-as-code with Kyverno/OPA Gatekeeper.
• Infrastructure & Network Security: Harden Linux production systems, assess segmentation, manage TLS/mTLS, PKI, certificate lifecycle, contribute to Zero Trust.
• IAM, PAM & Secrets: Review auth mechanisms, manage secrets (CyberArk, Vault), secure secret distribution and rotation.
• SaaS & On-Premises Security: Evaluate tenant isolation, data-access risks, blast radius, and lateral movement.
• Vulnerability Management & Incident Response: Prioritize vulnerabilities, investigate incidents, perform root-cause analysis.
• Security Architecture: Review services, model attack surfaces, perform threat modeling, validate controls.

Skills

Linux security

Kubernetes/OpenShift

CI/CD security

Threat modeling

OWASP Top 10

Tools

Kubernetes

OpenShift

Helm

Trivy

SonarQube

Semgrep

Kyverno

OPA Gatekeeper

Cosign

Falco

Tetragon

CyberArk

Vault

Ansible

Terraform

Splunk

Job description

New Mind AI is seeking an experienced DevSecOps & Infrastructure Security Engineer to reinforce security across SaaS platforms, on-prem deployments, and Kubernetes/OpenShift environments. You will own security initiatives end-to-end, assess architectures, and guide engineering teams on mitigations.

The role requires 5+ years in security-focused roles, strong Linux/network security knowledge, hands-on Kubernetes/OpenShift, and expertise in CI/CD security, SAST, SCA, and secret management.