Remote Senior DevSecOps Engineer: Cloud & Kubernetes

Toloka; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Toloka AI is hiring a senior hands-on security engineer to own infrastructure security and vulnerability management across cloud environments and Kubernetes/service-mesh security. You will drive remediation, tooling, and policy enforcement from day one.

The role focuses on owning vulnerability-management, cloud hardening, and secure production deployments while coordinating with AI teams on security risk and architecture reviews.

Qualifications

• Experience hardening cloud infrastructure (IAM, logging, service accounts, network security).
• Kubernetes security, service mesh, and policy-as-code experience.
• Vulnerability-management and SLA-driven remediation.
• Fluency with coding agents or agentic tools for IaC review.

Responsibilities

• Own vulnerability-management platform; ensure container images are scanned and patched regularly.
• Own cloud security across AWS, GCP, and Azure hardening, logging, and governance.
• Own Kubernetes security; manage service-mesh security and policy-as-code rollout.
• Review security for new environments and AI production integrations; remediate findings.

Skills

Kubernetes security

Cloud security

Vulnerability management

Policy-as-code

Multi-cloud (AWS/GCP/Azure)

CI/CD security

Tools

Kyverno

OPA (Open Policy Agent)

Terraform

Cilium/Istio

Job description

Toloka AI is hiring a senior hands-on security engineer to own infrastructure security and vulnerability management across cloud environments and Kubernetes/service-mesh security. You will drive remediation, tooling, and policy enforcement from day one.

The role focuses on owning vulnerability-management, cloud hardening, and secure production deployments while coordinating with AI teams on security risk and architecture reviews.