Position: Middle/Senior DevSecOps Engineer
Company: Svitla Systems
Experience required: 2y
Category: DevOps
English level: intermediate
Published: 2021-12-01T00:00:00+02:00

Svitla Systems Inc. is looking for a Middle/Senior DevSecOps Engineer for a full-time position (40 hours per week) in Ukraine. Our client is a global leader in multi-vertical online comparison marketplaces. The matching technology helps millions of consumers worldwide make more intelligent, more confident buying decisions while simultaneously enabling brands to maximize their online presence. They do so by creating trusted comparison websites that allow consumers to easily compare products and services online and form high-value relationships with the brands they choose. They operate comparison websites, such as Top10.com, that drive high-value customer acquisition for leading brands, identifying high-intent users who haven't demonstrated brand preference. Their websites simplify the decision-making process and build brand consideration, delivering a strong ROI for brands. They are seeking a dynamic DevSecOps to join the tech team. As a DevSecOps Engineer, your primary challenge will be to manage the security of the client’s global cloud infrastructure, taking the lead on the protection, guidance, designing, automation, and support of the cloud security operations. You will also contribute to other security domains and initiatives such as Incident Response, Security Monitoring, and Risk Management. You will work with the client’s DevOps group to maintain high-security standards and high availability for production.
**Requirements:**
2+ years in a DevSecOps or DevOps role or similar role, in which you designed cloud environments - preferably AWS 
2+ years experience in coding and scripting (Python/Ruby/Go/Bash) for promoting automation in cloud environments. 
Proven knowledge of core security networking concepts like TLS, SSH, DNS, Firewalls etc. 
Solid knowledge of information security principles and practices. 
Strong familiarity with log shipping, monitoring, and AWS 
Solid knowledge of web infrastructure 
Working experience of CI/CD and development pipeline technologies 
Working experience with containerized environments and microservices, and in particular with Docker/Kubernetes 
Good English
**Secondary (but important) attributes **

Over 1 year experience with designing, implementing, supporting and evaluating  security-focused tools, vulnerably management tools and services. 
Over 1 year experience with periodic Vulnerability assessment and ensuring 
prioritization of remediation in a high-scale cloud environment 
Over 1 year experience in infosec incident handling 
Happy to work independently and as part of a team 
Ability to effectively prioritize and execute tasks
Will be a plus:
Cloud Security Certifications like AWS Certified Security Specialty 
Understanding of regulatory compliance and how it relates to security and privacy
**Responsibilities:**
Provide the security of the Cloud and Monitoring environments.
Guide and design a secure infrastructure, assisting DevOps, RnD, IT, and other tech leaders to ensure security standards are kept.
Identify security tools and lead the implementation of solutions from POC to Production (e.g., CSPM, Runtime Protection, Container Security, Pipeline integrity, API Security, etc.).
Manage and maintain existing security systems and tools.
Lead client's cloud compliance by maintaining proper audit trails and logging of security events.
Work closely with RnD, Product, and DevOps to define security strategy and execute it.
Perform as a part of architectural design for applications and infrastructure.
Work alongside Architects, Developers, IT, and other tech leads to design and support best-of-breed integrations with 3rd party partners, vendors, and clients.
Ensure the implementation of Security and Privacy By Design concepts is appropriately executed across all environments.
Lead security audits, network scans, and vulnerability assessments on the client's infrastructure.
Respond to security incidents and investigations, taking part in the handling of service faults.
**We Offer:**
Competitive compensation plan that takes skills and experience into consideration.
Annual performance appraisals.
Possibility to choose your workspace either remote or combination of your home and one of our development offices. 
Projects that use advanced, cutting-edge technologies.
Competitive bonuses for a personal recommendation of new employees.
Vacation time, sick-leaves, national holidays, family supplementary days off.
Comprehensive medical insurance including dental services, massages.
Support for a healthy lifestyle, compensation of sports events.
Maternity leave policy.
A personal loan budget is available for long-term personnel.
Partial compensation of conferences, courses, and English classes.
Free meetups, webinars, and conferences organized by Svitla.
Birthday and New Year presents for personnel, gifts for children.
Fun summer and winter corporate parties and memorable anniversary presents.