DevSecOps Engineer (AWS)

Location: Bucharest, Romania; hybrid workplace

Company

hirify.global operates in software development and is hiring for a security-focused engineering role.

What you will do

• Design and implement cloud security controls across AWS, covering identity, network, and infrastructure layers.
• Develop Python and Bash automation to enforce security controls, compliance, and operational efficiency.
• Integrate security into CI/CD pipelines and DevOps workflows across the software development lifecycle.
• Build and maintain DevSecOps reference architectures, technical standards, engineering patterns, and best practices.
• Implement automated SAST, DAST, SCA, container, image, secret, credential, and infrastructure security scanning.
• Manage vulnerability scanning, prioritization, remediation tracking, reporting, governance, compliance reviews, and Kubernetes security.

Requirements

• At least 3 years of experience in DevSecOps, security engineering, or security-focused DevOps.
• Knowledge of AppSec, the OWASP Top 10, secure coding, Linux administration, TCP/IP networking, virtualization, and databases.
• Hands-on experience with Git, CI/CD concepts, Python, and Bash.
• Knowledge of vulnerability management tools such as Qualys and Nessus, plus SAST/DAST tools including SonarQube, OWASP ZAP, or Burp Suite.
• Understanding of monitoring tools such as Grafana and Prometheus, Terraform security, Kubernetes security, and vulnerability scanners.
• Strong technical documentation and writing skills are mandatory.

Nice to have

• Experience with Terraform, Ansible, YAML, orchestration, and Agile/Scrum methodologies.
• Experience supporting continuous Authority to Operate initiatives.
• Exposure to multi-account AWS governance, SCPs, IAM boundaries, HashiCorp Vault, or AWS Secrets Manager.

Culture & Benefits

• Hybrid work arrangement in Bucharest.
• Cross-functional collaboration with infrastructure, development, and cybersecurity teams.
• Work focused on practical security controls, continuous compliance, and audit readiness.