DevSecOps-инженер

Senior DevSecOps engineer for fintech/telecom/retail projects, remote full-time, salary 230k-270k RUB per month, company OUTKOD.

Responsibilities: Integrate security checks into CI/CD: code analysis, dependencies, container images, and secret detection. Configure checks to provide useful results without excessive false positives. Ensure security of Linux, Docker, Kubernetes, and cloud infrastructure. Manage secrets, access rights, and environment configurations. Identify vulnerabilities, assess their severity, and help teams mitigate risks. Review Infrastructure as Code and develop secure deployment templates. Participate in incident analysis and improve security event monitoring. Document solutions and help developers adopt secure practices.

Practical experience in DevSecOps or DevOps/SRE with security tasks. Solid knowledge of Linux, networking, HTTP/HTTPS, TLS, and access control principles. Experience with Docker, Kubernetes, and a CI/CD system: GitLab CI, GitHub Actions, Jenkins, or similar. Proficiency in Terraform and/or Ansible. Understanding of SAST, DAST, SCA, container scanning, and vulnerability management approaches. Automation skills in Python, Bash, or Go. Ability to explain risks and propose practical solutions. Nice to have: Experience with Vault, Trivy, Semgrep, SonarQube, OWASP ZAP, or similar tools. Knowledge of AWS, Azure, GCP, or other cloud platforms. Experience configuring Kubernetes policies, OPA/Kyverno, Falco. Familiarity with SBOM, artifact signing, and software supply chain security. Experience with threat modeling and incident response.

Work format: remote. Employment: full-time. Salary: from 230,000 to 270,000 RUB after taxes.