Freelance Senior DevSecOps Engineer

Toloka; Athens (GA); Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Fully remote

Flexible schedule

Job summary

Toloka is seeking a remote cloud security engineer to lead security across multi-cloud environments. You will manage vulnerability management, supply-chain scanning, and policy-as-code rollout, while hardening AWS/GCP/Azure, configuring log governance, and maintaining the service mesh.

You will work with Kyverno/OPA, Terraform, and CI/CD pipelines, reviewing infrastructure, pipelines, and new AI-enabled integrations for risk in production. Flexibility and strong written communication are valued.

Qualifications

• Experience securing multi-cloud production environments.
• Hands-on with cloud security tooling across AWS/GCP/Azure.
• Familiarity with policy-as-code and security automation.

Responsibilities

• Operate and maintain vulnerability-management platform.
• Maintain supply-chain scanning tooling and its severity-classification configuration.
• Own cloud security across multiple providers.
• AWS, GCP, and Azure hardening, logging, and service-account governance.
• Operate the service mesh and maintain policy-as-code rollout.
• Review build pipelines and infrastructure for security findings.
• Review new integrations and internal systems for security risk.
• Use coding agents for infrastructure-as-code review and verification.
• Onboard to cloud environment and Kubernetes architecture.
• Configure supply-chain scanning tooling and patching; deploy policy rules.
• Complete policy-as-code rollout in environments; close gaps.
• Establish and enforce multi-cloud hardening baseline.
• Own infrastructure and cloud security as a domain; Kubernetes/service mesh.
• Familiarity with Kyverno/OPA and Terraform.

Skills

Cloud security

Kubernetes

Policy-as-code

Terraform

AWS/GCP/Azure

Vulnerability management

CI/CD

Git

Threat modeling

Tools

Kyverno

OPA

Cilium/Istio

Container security

Infrastructure as Code review

Job description

Company Intro

At Toloka AI we create data that powers leading GenAI models and innovations. We work with frontier labs, big tech, renowned AI startups, enterprises and non-profit research organizations worldwide. We use a combination of Experts + Crowd + Tech Platform to teach AI models to reason and evaluate their efficacy and safety. We have experts in more than 50 different domains—from doctors and lawyers to physicists and engineers—and boast one of the most diverse global crowds, representing over 100 countries and speaking 40+ languages. We are a well-funded startup with an enviable portfolio of clients including Anthropic, Amazon, Microsoft, poolside, Recraft, and Shopify.

Remote-First Team

Our remote-First team is globally distributed around the world: Toloka is growing rapidly, adding new platforms and infrastructure across multiple cloud environments. Kubernetes and service-mesh security, cloud hardening, and vulnerability remediation.

Key Responsibilities

• Operate and maintain the vulnerability-management platform.
• Maintain supply-chain scanning tooling and its severity-classification configuration.
• Own cloud security across multiple providers.
• AWS, GCP, and Azure hardening, logging, and service-account governance.
• Operate the service mesh and maintain the policy-as-code rollout so that policy is enforced automatically.
• Review build pipelines and infrastructure in newer parts of the business as they come online, and remediate findings.
• Review new integrations and internal systems, including AI agents running in production, for security risk.
• Use coding agents for first-pass review of infrastructure-as-code, container configuration, and cloud policy, verifying findings against source configuration before acting on them.
• Weeks 1–2 - Onboard to the cloud environment, Kubernetes architecture, and existing security tooling.
• Month 2 - Complete configuration of supply-chain scanning tooling; implement automated image scanning and patching; deploy initial policy-as-code rules.
• Month 3 - Complete policy-as-code rollout in at least one environment; Month 4 - Close outstanding cloud logging and service-account gaps; establish and enforce a documented multi-cloud hardening baseline.
• Months 5–6 - Full ownership of infrastructure and cloud security as a domain; Kubernetes and service mesh, policy-as-code tooling (Kyverno/OPA), Terraform, AWS/GCP/Azure, vulnerability-management and supply-chain scanning platforms, container tooling, CI/CD, and Git. Familiarity with coding/agentic tools for infrastructure review is expected.
• Production experience hardening cloud infrastructure - IAM, logging, service accounts, network security, on at least one major cloud provider (multi-cloud experience is a plus).
• Kubernetes and container security - service mesh (Cilium, Istio, or similar) and policy-as-code (Kyverno, OPA, or similar).
• Fluency with coding agents - experience using agentic tools for infrastructure-as-code review or investigation work, and verifying their output.
• Clear written and verbal communication - able to run design reviews and communicate risk to engineers and leadership.
• AWS/GCP/Azure security specialties, CKS).

Contract & Benefits

• Contract (B2B) collaboration , with a path into a project team if things go well;
• Flexible, fully remote schedule (40 hours per week );
• Work at the leading edge of AI development, alongside a dedicated and dynamic team of experts;
• Projects with customers that are AI industry leaders and well-known household names;
• Friendly community.