Senior DevSecOps Engineer: Cloud & Kubernetes Security (Remote)

Toloka; New York (NY); A distancia; USD 140.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Contract (B2B) collaboration

Remote schedule

Leading-edge AI development

Top AI clients

Friendly community

Descripción de la vacante

Toloka is hiring a senior security engineer to own infrastructure security and vulnerability management across multi-cloud environments. The role focuses on Kubernetes/service-mesh security, cloud hardening, and policy-as-code rollout.

You will define scope, drive execution, and own core security tooling from day one. The position emphasizes independent ownership, strong coordination with engineering teams, and ongoing risk reduction across diverse platforms and environments.

Formación

• Experience hardening cloud infrastructure and IAM.
• Hands-on in security tooling and vulnerability remediation.
• Ability to define scope and drive execution at senior level.

Responsabilidades

• Own vulnerability-management platform and patch cadence.
• Secure cloud across AWS, GCP, and Azure with governance.
• Operate Kubernetes service-mesh security and policy-as-code rollout.
• Audit new infra and review builds for security risk.
• Contribute to security architecture and design reviews.
• Review integrations, including AI agents, for risk.
• Support workforce and endpoint security initiatives.
• Use agentic tooling to review IaC and container configs.

Conocimientos

Cloud security

Kubernetes security

Vulnerability mgmt

Policy as code

Multi-cloud

Agentic tooling

Security architecture

Herramientas

Kyverno

OPA

Terraform

AWS

GCP

Azure

Descripción del empleo

Toloka is hiring a senior security engineer to own infrastructure security and vulnerability management across multi-cloud environments. The role focuses on Kubernetes/service-mesh security, cloud hardening, and policy-as-code rollout.

You will define scope, drive execution, and own core security tooling from day one. The position emphasizes independent ownership, strong coordination with engineering teams, and ongoing risk reduction across diverse platforms and environments.