Senior DevSecOps Specialist (AI)

Location: Remote from anywhere in the world; schedule aligned with GMT+3

Company

hirify.global is a blockchain-sector company developing smartcard-based hardware wallets and mobile applications for secure digital asset management.

What you will do

• Design, implement, and improve security controls across CI/CD pipelines and GitHub repositories.
• Lead the implementation and continuous improvement of AI-powered security code review across pull requests, CI/CD pipelines, and development workflows.
• Establish secure code review practices, including branch protection, approval rules, CODEOWNERS, and reviews for critical code changes.
• Implement automated security testing, security quality gates, and AI-assisted verification to detect vulnerabilities before code is merged or released.
• Strengthen software supply chain security across dependencies, CI/CD access, build processes, and artifact integrity.
• Develop automation, investigate security findings, support remediation, and improve Cloudflare security services including WAF and API protection when required.

Requirements

• 5+ years of practical experience in DevSecOps, DevOps, or a similar technical security role.
• Strong hands-on experience with GitHub, GitHub Actions, and CI/CD security.
• Proven hands-on experience implementing AI-powered security code review solutions, including integration into pull request workflows, CI/CD pipelines, and automated security verification.
• Practical experience with SAST, SCA, and secrets scanning solutions such as CodeQL, SonarQube, Semgrep, Dependabot, or similar tools.
• Experience establishing secure code review workflows, branch protection policies, and automated security checks.
• Good understanding of secure software development practices, common application vulnerabilities, and software supply chain risks.
• Experience with security automation and scripting using Python, Bash, or similar languages.
• Understanding of cloud infrastructure security fundamentals, including AWS IAM, access management, and secrets management.
• Ability to independently implement security improvements, troubleshoot technical issues, and collaborate effectively with development teams.

Nice to have

• Experience with Cloudflare security products including WAF, API Shield, and Zero Trust.
• Experience securing Kubernetes, Docker, and AWS environments.
• Experience with Terraform and Infrastructure as Code security scanning.
• Familiarity with mobile application development and security using Swift or Kotlin.
• Experience with DAST, SBOM generation, artifact signing, and supply chain security frameworks.
• Experience developing custom AI security agents, evaluation frameworks, or automated vulnerability triage workflows.
• Experience working in fintech, blockchain, or other security-sensitive industries.

Culture & Benefits

• Remote work from anywhere in the world with a schedule aligned with GMT+3.
• Competitive salary paid in EUR or USDT.
• Unlimited vacation and paid sick leave.
• Compensation for necessary technical devices.
• Stability, professional development, and participation in company growth.
• Birthday presents.