DevSecOps / Security Engineer

Zeely Inc.; United States; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Zeely is seeking a DevSecOps / Security Engineer to secure our AWS environment, integrate security into CI/CD, and address vulnerabilities across products and infrastructure. You will respond to incidents, implement monitoring, and support SOC 2 and ISO 27001 audits.

You will collaborate with Principal System Architect, engineering, DevOps, and Platform teams, and engage external security partners to shape security as we scale globally.

Qualificações

• 5+ years of experience in DevOps, Platform, or infrastructure engineering, with at least 3 years in security.

Responsabilidades

• Secure and manage AWS-first cloud environment with IAM, secrets, hardening, and network security.
• Build security checks in CI/CD: SAST, DAST, SCA, secrets scanning, and IaC checks.
• Identify, prioritize, and remediate vulnerabilities across product and cloud infra.
• Respond to security incidents and implement monitoring and alerts.
• Close security tickets end to end with DevOps and Platform teams.
• Review code and infrastructure changes from a security perspective.
• Support SOC 2 and ISO 27001 audits and evidence collection.

Conhecimentos

AWS

Terraform

SAST/DAST/SCA

CI/CD security

SOC 2 / ISO 27001

Vulnerability management

Incident response

Security auditing

English (B2+)

Ukrainian

Node.js/TypeScript

Java

C#/.NET

Go

Python

AWS Certifications

HIPAA/PCI DSS/CASA

GDPR/CCPA

Ferramentas

Terraform

Descrição da oferta de emprego

Описание:

Join Zeely as a DevSecOps / Security Engineer and help us protect our products, infrastructure, and data as we scale. This is a hands-on role: you’ll secure our AWS infrastructure, build security into CI/CD, find and fix vulnerabilities, respond to incidents, and contribute to our SOC 2 and ISO 27001 compliance. You’ll work closely with our Principal System Architect, engineering, DevOps, and Platform teams, as well as external security partners, and help shape our security function as we grow. Zeely is the agentic AI platform for creating, launching, and scaling paid ads. Simply put: we've made the best AI solutions and marketing tools available to small and medium businesses — tools that used to be reserved for big brands with expensive marketing teams. The next big step: a B2B solution for large marketing teams and enterprise clients — workflows, creative analytics, and full control over campaigns across the whole team. For companies where performance marketing already runs at scale and needs more efficiency and automation.

A few numbers that speak for themselves:

• 4 years on the market a stable, profitable company backed by international investors;
• 6× growth over the past year;
• 2,000,000+ businesses already use Zeely;
• #1 in its category in the US market;
• 250+ specialists on the team;
• Markets: US + worldwide.

Задачи:

• Secure our AWS-first cloud environment hands-on: IAM and access management, secrets, hardening, and network security;
• Build and maintain security checks in CI/CD: SAST, DAST, SCA, secrets scanning, and infrastructure-as-code checks;
• Find, prioritize, and fix vulnerabilities across our product and cloud infrastructure, from investigation to fix in code or infrastructure;
• Respond to security incidents and set up monitoring and alerting;
• Close security tickets end to end, working with the DevOps and Platform teams;
• Review code and infrastructure changes from a security perspective;
• Implement security controls and prepare evidence for SOC 2 and ISO 27001 audits.

Требования:

• 5+ years of experience in DevOps, Platform, or infrastructure engineering, including at least 3 years focused on security (DevSecOps, Cloud Security, or Security Engineer);
• Ability to work fully independently and own tasks end to end;
• Strong hands-on experience with AWS and infrastructure as code using Terraform;
• Hands-on experience finding and fixing vulnerabilities (OWASP Top 10, cloud misconfigurations, dependency issues) and handling security incidents;
• Significant involvement in preparing for, passing, or maintaining SOC 2 and/or ISO 27001 — you understand the requirements behind each control and have worked with auditors;
• Upper-Intermediate (B2+) English or higher;
• Fluent Ukrainian.
• Backend development background (Node.js / TypeScript, Java, C#/.NET, Go, or Python), or a career path from backend to DevOps/Platform to Security;
• AWS certifications (Security Specialty, Solutions Architect Professional, or DevOps Engineer Professional) or other security certifications (OSCP, CKS, Security+);
• Experience with HIPAA, PCI DSS, or CASA;
• Understanding of GDPR and/or CCPA (CPRA) requirements.

Why It's Worth Joining Us:

• A hands-on security role at one of the world’s leading AI companies: Zeely is #22 in a16z’s Top 50 consumer AI apps by monthly revenue;
• Security is a strategic priority for the company, with full support from leadership and room to influence how things are built;
• Work with cutting-edge technologies and AI-powered tools;
• A strong team of A-level players who push each other to grow;
• A remote-first setup with offices in Warsaw and Kyiv;
• Regular performance reviews to keep your growth transparent and rewarded.

Recruitment Process:

• Intro Call
• Technical Interview
• Final Interview
• Reference Check
• Offer