DevSecOps Engineer

Навыки

• AppsFlyer / Adjust
• AWS
• Bash / shell
• CI/CD
• DevSecOps
• GitHub Actions
• GitLab CI

О компании и продукте

• Sumsub is the first AI-powered trust infrastructure for compliance operations at scale. It connects identity and business verification, fraud prevention, transaction monitoring, and risk workflows, helping teams reduce manual work and enter new markets.
• Trusted by over 4,000 clients across financial services, crypto, mobility, trading, marketplaces, education, and iGaming, including Bybit, Bitpanda, Wirex, Avis, Vodafone, Duolingo, Kaizen Gaming, and Bancaribe.
• Sumsub is recognized as a Great Place To Work® in the US and rated 4.3 out of 5 on Glassdoor. Our 1,000+ people around the world back it up, too: 92% are proud to be Sumsubers, and 90% say their work is interesting and challenging.
• Now we are looking for a Senior DevSecOps Engineer (Vulnerability & Fleet Management) to design, build, and operate security controls as reliable, automated internal services across our cloud and infrastructure . This role is an exciting opportunity to take full engineering ownership of our Vulnerability Management and Fleet Security capabilities, shifting security from manual gatekeeping to a scalable, self-service platform .

Задачи

• Own Vulnerability Management End-to-End: Design and operate scanning pipelines across infrastructure and containers (Nessus, Trivy or equivalent), managing CVE correlation, asset ownership mapping, and remediation SLAs
• Manage Infrastructure Fleet Security: Oversee fleet inventory, policy coverage, and configuration drift using tools like osquery or FleetDM-class solutions
• Build Smart Noise Reduction & Automation: Develop correlation logic linking vulnerabilities to business criticality and exploitability (CVSS/EPSS), and automate lifecycle operations (onboarding, asset reconciliation, exception workflows)
• Deliver Self-Service Security Products: Build APIs, dashboards, and ChatOps/Slack integrations that allow platform and engineering teams to consume security controls independently
• Codify Security Standards: Define machine-checkable security standards and ensure audit-ready compliance evidence is produced automatically as a byproduct of system operations
• Collaborate for Operational Resilience: Partner directly with SOC, Infrastructure, and Platform teams to validate controls in production while protecting developer experience

Требования

• Senior Platform Mindset: You think like a Platform Engineer building tools for internal customers, prioritizing developer experience and automated prevention over manual queue clearing
• Tooling & Program Ownership : Hands-on experience running program-level infrastructure scanning (Nessus, Qualys, Tenable) and container image security (Trivy or similar)
• Fleet & Cloud Infrastructure : Proven experience with fleet inventory systems (osquery, FleetDM) alongside cloud platforms (AWS preferred) and containerized/Kubernetes environments
• Automation & Engineering Fundamentals : Strong scripting ability in Python, Go, or Bash, with solid experience building custom APIs, dashboards, or system integrations
• Vulnerability & Risk Judgment : Deep understanding of CVEs, CVSS/EPSS scoring, and remediation workflows—with the practical judgment to know when theoretical frameworks don't match production reality
• Proven track record of evolving a security function from manual reviews toward platform ownership

Будет плюсом

• Experience integrating security gates into modern CI/CD pipelines (GitLab CI, GitHub Actions)
• Exposure to Kubernetes admission control and Policy-as-Code frameworks (Kyverno, OPA)
• Background in automating compliance evidence collection for standards like PCI DSS, SOC 2, or ISO 27001

Условия

• Remote-first, trust-based culture
• Work from the place that works best for you
• No mandatory office days, no attendance trackers
• In some locations, we provide offices or coworking spaces, but the choice is yours
• True flexibility
• We do not fix you to a 9-to-5 schedule
• You can adjust your working hours when needed, as long as your day stays productive and in sync with the team
• Extra time off
• Your birthday is a holiday here
• Add to that 10 personal days each year, seven sick days without paperwork, and extra time to enjoy Christmas and New Year
• Time to rest is part of the deal
• Work that matters
• Our mission is to build a digital world that is secure, accessible and inclusive for everyone
• From fighting fraud to making online services easier and safer to use, your work will have a real impact on how people experience trust online
• Compensation. We offer fair and transparent pay, benchmarked to the market
• Truly global
• We work across continents and time zones, with teammates and customers from all over the world
• You will run campaigns that cross borders, cultures, and languages, and see your ideas land worldwide
• Growth built in
• Clear goals, open feedback and personal development plans
• We support your progress with learning opportunities and by covering role-specific events, from design conferences to marketing forums
• Celebrating your big moments
• We are proud to support you through life’s biggest journeys with dedicated financial bonuses for both marriage and welcoming a new baby to your family
• Team offsites
• Sometimes just Slack is not enough

Паспорт вакансии

История публикации

Откуда что взялось

Отмечено то, что вывели мы. Без пометки — значение назвал работодатель.

Почему на этом месте в выдаче

Порядок выдачи объявлен контрактом: свежесть решает между днями, полнота и зарплата — внутри дня.