DevSecOps specialist in blockchain

Tangem; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Birthday presents

Device budget for work equipment

Paid sick leave

20 paid vacation days

Job summary

Tangem is seeking a Senior DevSecOps Specialist to design and maintain security monitoring systems, respond to incidents, and manage vulnerability remediation across cloud infrastructure. The role requires hands-on experience with AWS, Kubernetes security, CI/CD security in GitHub, and SAST tooling to ensure secure development pipelines.

The successful candidate will collaborate with engineering teams, implement security-by-design practices, and help secure backend services and APIs while

Qualifications

• 1+ year of experience with AWS (IAM, cloud architecture, etc.).
• 1+ year of experience securing Kubernetes environments.
• Experience with Cloudflare products (WAF, API Shield, etc.).
• Experience configuring SAST tools (SonarQube, CodeQL, etc.).
• Experience securing CI/CD processes in GitHub.
• Understanding and ability to analyze Infrastructure-as-Code (Terraform, Terragrunt, etc.).
• Experience in identifying and investigating information security incidents.
• Understanding of security-by-design principles.

Responsibilities

• Build and maintain the Security Monitoring System for AWS infrastructure.
• Identify and respond to security incidents in AWS.
• Detect and address vulnerabilities in code and infrastructure.
• Provide expert support to development teams on secure development practices.
• Ensure the security of backend infrastructure and its public APIs.
• Supervise GitHub configuration in terms of secure development processes.
• Set up SAST tools and CI/CD quality gates.
• Analyze attack vectors and prioritize remediation of project infrastructure vulnerabilities.

Skills

AWS

Kubernetes security

Security incidents

CI/CD security

Security by design

Cloudflare

SAST

GitHub

Tools

SonarQube

CodeQL

Terraform

Terragrunt

GitHub

Cloudflare

Job description

We are looking for a Senior DevSecOps Specialist to join our team. The position involves designing and maintaining security monitoring systems, incident response, vulnerability management, and supporting secure development practices across our cloud infrastructure.

Задачи

• Build and maintain the Security Monitoring System for AWS infrastructure
• Identify and respond to security incidents in AWS
• Detect and address vulnerabilities in code and infrastructure
• Provide expert support to development teams on secure development practices
• Ensure the security of backend infrastructure and its public APIs
• Supervise GitHub configuration in terms of secure development processes
• Set up SAST tools (e.g., Software Composition Analysis, secret detection, CI/CD quality gates, etc.)
• Analyze attack vectors and prioritize remediation of project infrastructure vulnerabilities

Требования

• 1+ year of experience working with AWS (IAM, cloud architecture, etc.)
• 1+ year of experience securing Kubernetes environments
• Experience with Cloudflare products (WAF, API Shield, etc.)
• Experience configuring SAST tools (SonarQube, CodeQL, etc.)
• Experience securing CI/CD processes in GitHub
• Understanding and ability to analyze Infrastructure-as-Code (Terraform, Terragrunt, etc.)
• Experience in identifying and investigating information security incidents
• Understanding of security-by-design principles

Условия

• Stability, development, participation in the future unicorn's growth
• Remote work from anywhere in the world, excluding Russia and Belarus, with a schedule aligned with GMT+3
• Competitive salary in EURO/USDT
• 20 working days of paid vacation
• Birthday presents
• Compensation for the purchase of necessary technical devices for the work
• Paid sick leaves