About the Opportunity

We are looking for a DevSecOps Engineer to embed security into the tools, workflows, and infrastructure used to build and operate modern digital financial services. This position focuses on making secure software delivery repeatable through automation, continuous testing, infrastructure controls, and reliable deployment practices.

You will work alongside development, platform engineering, and operations teams to reduce security risks without creating unnecessary friction in the delivery process. The successful candidate will understand how software moves from source code to production and will be capable of identifying weaknesses at each stage of that journey.

This is a hands-on engineering role for someone who values automation, secure cloud architecture, operational reliability, and continuous improvement.

Key Responsibilities

• Integrate automated security checks into CI/CD pipelines, including static application security testing, software composition analysis, and infrastructure-as-code scanning.
• Develop and maintain secure deployment workflows for cloud-native applications and distributed services.
• Implement security controls for Docker containers, Kubernetes environments, container registries, and runtime configurations where applicable.
• Secure infrastructure provisioning through tools such as Terraform, using version-controlled and repeatable infrastructure-as-code practices.
• Establish effective secrets management, certificate handling, workload identity, and least-privilege access controls.
• Monitor security findings from development pipelines and coordinate remediation with software engineers.
• Improve dependency management, software supply-chain security, artefact integrity, and vulnerability patching processes.
• Support centralised logging, security alerting, audit trails, and incident investigation.
• Apply secure baseline configurations to cloud resources, build agents, deployment environments, and developer tooling.
• Document security automation standards and help teams adopt consistent secure engineering practices.
• Contribute to disaster recovery, infrastructure resilience, and secure release procedures.

Required Qualifications and Experience

• Practical experience in DevOps, platform engineering, cloud infrastructure, application security, or DevSecOps.
• Strong understanding of CI/CD tools such as GitHub Actions, GitLab CI/CD, Jenkins, or equivalent platforms.
• Experience with at least one major cloud provider, including its identity, networking, logging, and security services.
• Working knowledge of Docker, Kubernetes, and container security principles.
• Familiarity with Terraform or another infrastructure-as-code framework.
• Understanding of SAST, DAST, software composition analysis, vulnerability prioritisation, and secure coding practices.
• Ability to write scripts using Python, Bash, or a comparable language.
• Knowledge of Git workflows, Linux systems, API security, and production troubleshooting.
• Awareness of security governance and data protection requirements relevant to financial services.

Preferred Experience

Experience with software bills of materials (SBOMs), signing and verifying build artefacts, policy-as-code, runtime threat detection, and security frameworks such as NIST guidance or ISO/IEC 27001 is beneficial.

Measures of Success

Performance in this role will be assessed through meaningful improvements in security automation, the reduction of recurring vulnerabilities, faster remediation of high-risk findings, stronger deployment controls, and consistent adoption of secure engineering standards.

Working Approach

You will be expected to balance security requirements with development speed, explain technical risks clearly, and build automation that engineers can use confidently. The objective is not simply to identify vulnerabilities, but to prevent recurring weaknesses through well-designed engineering controls.

Ideal Candidate: An automation-focused engineer who understands modern cloud delivery, enjoys solving complex technical problems, and can make security an effective, measurable component of everyday software engineering.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecrument
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.