Senior DevSecOps Engineer Remote Multi-Cloud Security Lead

Toloka; Athens (GA); Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Fully remote

Flexible schedule

Job summary

Toloka is seeking a remote cloud security engineer to lead security across multi-cloud environments. You will manage vulnerability management, supply-chain scanning, and policy-as-code rollout, while hardening AWS/GCP/Azure, configuring log governance, and maintaining the service mesh.

You will work with Kyverno/OPA, Terraform, and CI/CD pipelines, reviewing infrastructure, pipelines, and new AI-enabled integrations for risk in production. Flexibility and strong written communication are valued.

Qualifications

• Experience securing multi-cloud production environments.
• Hands-on with cloud security tooling across AWS/GCP/Azure.
• Familiarity with policy-as-code and security automation.

Responsibilities

• Operate and maintain vulnerability-management platform.
• Maintain supply-chain scanning tooling and its severity-classification configuration.
• Own cloud security across multiple providers.
• AWS, GCP, and Azure hardening, logging, and service-account governance.
• Operate the service mesh and maintain policy-as-code rollout.
• Review build pipelines and infrastructure for security findings.
• Review new integrations and internal systems for security risk.
• Use coding agents for infrastructure-as-code review and verification.
• Onboard to cloud environment and Kubernetes architecture.
• Configure supply-chain scanning tooling and patching; deploy policy rules.
• Complete policy-as-code rollout in environments; close gaps.
• Establish and enforce multi-cloud hardening baseline.
• Own infrastructure and cloud security as a domain; Kubernetes/service mesh.
• Familiarity with Kyverno/OPA and Terraform.

Skills

Cloud security

Kubernetes

Policy-as-code

Terraform

AWS/GCP/Azure

Vulnerability management

CI/CD

Git

Threat modeling

Tools

Kyverno

OPA

Cilium/Istio

Container security

Infrastructure as Code review

Job description

Toloka is seeking a remote cloud security engineer to lead security across multi-cloud environments. You will manage vulnerability management, supply-chain scanning, and policy-as-code rollout, while hardening AWS/GCP/Azure, configuring log governance, and maintaining the service mesh.

You will work with Kyverno/OPA, Terraform, and CI/CD pipelines, reviewing infrastructure, pipelines, and new AI-enabled integrations for risk in production. Flexibility and strong written communication are valued.