Senior DevSecOps Engineer - Remote & Flexible Hours

BairesDev; Peru (IL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

100% remote

USD or local currency

Home office setup

Flexible hours

Parental leave & vacations

Global mentorship

Job summary

BairesDev is seeking a Senior DevSecOps Engineer to embed security across the software development lifecycle. You’ll bridge development, operations, and security to make protection a built-in feature, not a hurdle.

You will automate security scanning in CI/CD, codify policies with Open Policy Agent, manage IaC security, and oversee secrets management in cloud-native environments. English proficiency is essential for global collaboration.

Qualifications

• 4+ years of experience in DevSecOps, DevOps, or Cybersecurity Engineering.
• Experience integrating security tooling into CI/CD pipelines (Snyk, Trivy, Aqua).
• Policy as Code using OPA or similar frameworks.
• Secrets management and Infrastructure as Code security.
• Container security and cloud-native protection strategies.
• Advanced proficiency in English.

Responsibilities

• Integrate automated security scanning and vulnerability assessment tools into existing CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks to ensure continuous compliance.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Oversee the implementation and rotation of enterprise-wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews to proactively address risks in cloud-native environments.

Skills

DevSecOps

CI/CD security

Policy as Code

Secrets management

Cloud security

English proficiency

Tools

Snyk

Trivy

Aqua

Open Policy Agent (OPA)

Job description

BairesDev is seeking a Senior DevSecOps Engineer to embed security across the software development lifecycle. You’ll bridge development, operations, and security to make protection a built-in feature, not a hurdle.

You will automate security scanning in CI/CD, codify policies with Open Policy Agent, manage IaC security, and oversee secrets management in cloud-native environments. English proficiency is essential for global collaboration.