Назад
Company hidden
9 дней назад

Senior DevSecOps Engineer (Fintech)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Cyprus
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior DevSecOps Engineer (Fintech): Defining and enforcing security architecture across AWS and Azure for a regulated financial-services infrastructure with an accent on cloud security, identity governance, vulnerability management, and compliance controls. Focus on building security-as-code, protecting APIs and crypto-asset infrastructure, operating SIEM and EDR telemetry, and automating ISO 27001, SOC 2, and DORA control monitoring.

Location: Cyprus, hybrid

Company

hirify.global is hiring for an international broker based in Cyprus, operating in regulated financial services and crypto-related infrastructure.

What you will do

  • Define and enforce security architecture across AWS and Azure, including landing zones, policies, network segmentation, encryption, logging, and monitoring.
  • Own internet-facing security, including WAF, DDoS protection, VPN, zero-trust access, DNS, certificates, and exposure management.
  • Run vulnerability management, threat modeling, security reviews, remediation tracking, and secure infrastructure design.
  • Design enterprise access controls across AWS IAM, Azure RBAC, Kubernetes, databases, networks, and SaaS, including SSO, phishing-resistant MFA, PAM, and break-glass procedures.
  • Operate security telemetry and detection capabilities across cloud, identity, endpoint, Kubernetes, network, application, WAF, and VPN sources.
  • Automate security and compliance through Terraform, policy-as-code, CI/CD controls, evidence collection, and continuous monitoring for ISO 27001, SOC 2, and DORA.

Requirements

  • 6+ years of hands-on infrastructure, cloud, or security engineering experience, including 3+ years with security as the primary responsibility.
  • Experience in regulated financial services such as brokerage, trading, payments, banking, or crypto services.
  • Production experience securing complex AWS and Azure environments, including IAM, RBAC, networking, private connectivity, KMS, Key Vault, logging, detection, landing zones, and policy enforcement.
  • Deep practical knowledge of Active Directory, Group Policy, Conditional Access, hybrid identity, enterprise IAM, PAM, and access-rights governance.
  • Experience building SIEM and EDR detections, managing alert quality, and handling security incidents end to end.
  • Experience with Terraform or equivalent IaC, CI/CD security gates, Kubernetes and container security, policy-as-code, Python, Bash, PowerShell, APIs, and crypto-asset infrastructure such as HSM or MPC signing.

Culture & Benefits

  • Opportunity to work for a financially strong, fast-growing multinational company.
  • Regular interaction with global teams of professionals.
  • Competitive salary package and motivation scheme.
  • International career opportunities.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →