Senior DevSecOps

Svitla Systems, Inc.; Town of Poland (NY); Hybrid; USD 105,000 - 174,000; Full time

Benefits offered by this job

Remote or office flex

Medical insurance after one month

Vacation days 15

Bonuses for referrals

Learning programs

Job summary

Svitla Systems Inc. is seeking a Senior DevSecOps for a full-time role in Europe. You will mature cloud security practices across AWS and Azure, embed security into the development lifecycle, and drive vulnerability remediation through scalable automation.

You will collaborate with development teams, cloud architects, and security colleagues to ensure compliance, implement policy-as-code, and champion Zero Trust principles across multi-cloud environments.

Qualifications

• 10+ years in IT with 5+ years in cloud security and DevSecOps roles.
• Deep expertise in AWS and Azure security services and architectures.
• Experience with security automation, Python/Bash scripting, and cloud-native security tooling.

Responsibilities

• Define and implement advanced security strategies for multi-cloud environments (AWS, Azure).
• Drive security automation and continuous compliance across CI/CD pipelines.
• Influence architecture and design to align with Zero Trust and cloud-native security principles.
• Lead vulnerability identification, prioritization, and remediation efforts across projects.
• Collaborate with Development, Cybersecurity, and Tech Architecture teams to ensure sustainable fixes and long-term risk reduction.
• Establish governance frameworks for secure development and deployment practices.
• Own security posture monitoring using Datadog, Wiz, and native cloud tools.
• Provide executive-level reporting and actionable insights for leadership.

Skills

Multi-cloud security

AWS security

Azure security

CI/CD security integration

Infrastructure as Code

Container security

Vulnerability management

Policy-as-code

SOC 2 compliance

Leadership/communication

Education

Bachelor's degree in IT or related field

Tools

Datadog

Wiz

Terraform

CloudFormation

ARM templates

Kubernetes security tooling

Job description

Svitla Systems Inc. is looking for a Senior DevSecOps for a full-time position (40 hours per week) in Europe. Our client is a Canadian courier and package delivery company. The company delivers nearly 500,000 parcels daily across Canada thanks to a technological platform offering more than 3500 optimized routes to almost 500 independent delivery employees. The company's services are provided via a digital order tracking platform that lets suppliers and logistics service dealers accept bulk orders, track parcel delivery routes, check and communicate shipment details, manage bills and invoices, and fasten the cargo shipment processes by partnering with certified transporters, enabling clients to request and enjoy secured transportation of their parcels and cargos by being able to track them in real-time. The client’s customers include Amazon, Pitney Bowes, and Landmark Global, which handle shipping for Etsy and eBay.

You will lead and mature our cloud security practices across AWS and Azure environments. This role is pivotal in embedding security into the development lifecycle, driving sustainable vulnerability remediation, and influencing architectural decisions for both new and legacy systems. You will partner with development teams, cloud architects, and the cybersecurity organization to ensure robust security posture, monitor compliance, and champion Infrastructure as Code (IaC) best practices.

• Required Overlap 7 pm CET.

Requirements

• 10+ years of experience in IT, with 5+ years in cloud security and DevSecOps roles.
• Deep expertise in AWS and Azure security services and architectures.
• Experience in security automation, scripting with Python and Bash, and cloud-native security tooling.
• Proven track record of leading security initiatives in large-scale, multi-cloud environments.
• Advanced proficiency in IaC tools (Terraform, CloudFormation, ARM templates).
• Hands-on experience with Datadog, Wiz, and vulnerability management platforms.
• Strong knowledge of CI/CD security integration, container security (Docker, Kubernetes), and policy-as-code.
• Familiarity with compliance frameworks (SOC 2) and risk management methodologies.
• Exceptional communication and leadership skills for influencing technical and business stakeholders.

Will be a plus

• Certifications: AWS Certified Security - Specialty, Azure Security Engineer, GIAC Cloud Security Automation, Kubernetes Security Specialist, or equivalent.

Responsibilities

• Define and implement advanced security strategies for multi-cloud environments (AWS, Azure).
• Drive security automation and continuous compliance across CI/CD pipelines.
• Influence architecture and design decisions to align with Zero Trust and cloud-native security principles.
• Lead vulnerability identification, prioritization, and remediation efforts across diverse projects and workloads.
• Collaborate with Development, Cybersecurity, and Tech Architecture teams to ensure sustainable fixes and long-term risk reduction.
• Establish governance frameworks for secure development and deployment practices.
• Own security posture monitoring using Datadog, Wiz, and native cloud tools.
• Track and improve organizational security scores, compliance benchmarks, and risk indicators.
• Collaborate with Cybersecurity to implement monitoring strategies for the detection of anomalies and policy violations.
• Provide executive-level reporting and actionable insights for leadership.
• Champion secure IaC practices (Terraform) with DevOps and SRE teams.
• Integrate automated security checks into build pipelines and enforce policy-as-code.
• Mentor teams on secure coding, container security, and cloud security best practices.
• Act as a trusted advisor to development, operations, and security stakeholders.
• Drive cultural adoption of security-first principles across engineering teams.
• Contribute to incident response planning and post-mortem analysis for security events.

We offer

• US and EU projects based on advanced technologies.
• Competitive compensation based on skills and experience.
• Regular performance appraisals to support your growth.
• Flexibility in the workspace, either remote or in our welcoming office.
• Comprehensive medical insurance after one month.
• MultiSport card with access to 2500 sports facilities all over Poland
• Bonuses for recommendations of new employees.
• Bonuses for article writing, public talks, and other activities.
• 15 vacation days, 10 national holidays, 10 sick leaves, and family days off.
• Personalized learning program tailored to your interests and skill development.
• Free tech webinars and meetups organized by Svitla.
• Welcome and anniversary presents, gifts for children, and more.
• Regular corporate events and meetups.
• Awesome team, friendly and supportive community!

Why join Svitla

Svitla Systems is a global digital solutions company headquartered in the U.S. and operating across the Americas, Europe, Asia, and APAC. Since 2003, we have served a wide range of clients - from innovative start-ups to Fortune 500 companies. Our success is built on partnership. By integrating seamlessly with clients' teams, we create lasting collaborations that drive real results. We are strong advocates of workplace flexibility, remote culture, individual approach to professional and personal growth.

Our global mission is to build a business that contributes to wellbeing of our partners, personnel, and their families, improves our communities, and makes a lasting difference in the world. Together, we are coding a brighter tomorrow - and living it.