Senior DevSecOps Engineer & Security Architect

Thndr; Sofia (NM); On-site; USD 120,000 - 190,000; Full time

Job summary

Thndr is seeking a Senior Cyber Security Engineer/DevSecOps to bridge offensive and defensive security within product, engineering, and infrastructure teams. You will champion security by building secure architecture from the ground up and driving the S-SDLC across cycles.

You will review features for security, guide team adoption of security best practices, and perform regular security assessments, pen tests, and incident response. Strong cloud and container skills are essential.

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, or a related field (or equivalent work experience).
• 5+ years of experience performing application and/or infrastructure penetration testing beyond automated tools.
• Security code reviews experience; Python a plus.
• Solid understanding of cloud platforms (AWS, Azure, or GCP) and containerization (Docker, Kubernetes); serverless/Lambda a plus.
• Strong knowledge of software development principles, testing methodologies, and Git.

Responsibilities

• Collaborate with product and engineering to review features and enhance security.
• Drive secure development lifecycle and threat modeling.
• Mentor team members on security practices.
• Conduct pre/post-deployment security tests, pen tests, and security assessments.
• Implement and monitor infrastructure security measures and logging/monitoring.

Skills

Threat modeling

Security architecture

Penetration testing

Code review

Python

Cloud security

Containerization

Communication

SIEM management

Education

Bachelor's degree in Computer Science or related

Tools

Docker

Kubernetes

Fortinet

SIEM solutions

EDR/IDS/CWPP

Job description

Thndr is seeking a Senior Cyber Security Engineer/DevSecOps to bridge offensive and defensive security within product, engineering, and infrastructure teams. You will champion security by building secure architecture from the ground up and driving the S-SDLC across cycles.

You will review features for security, guide team adoption of security best practices, and perform regular security assessments, pen tests, and incident response. Strong cloud and container skills are essential.