Senior DevSecOps Specialist (Blockchain/AWS)

TL;DR

Senior DevSecOps Specialist (Blockchain/AWS): Designing and maintaining security monitoring systems, incident response, vulnerability management, and supporting secure development practices across cloud infrastructure with an accent on secure development processes and infrastructure security. Focus on identifying and responding to security incidents, analyzing attack vectors, and securing CI/CD in GitHub and Kubernetes environments.

Location: Work from anywhere in the world, with a schedule aligned with GMT+3.

Company

hirify.global is a high-tech product company in the blockchain sector, focused on bringing digital assets to the masses using smartcard-based hardware wallets and mobile applications.

What you will do

• Build and maintain Security Monitoring System for AWS infrastructure.
• Identify and respond to security incidents in AWS.
• Detect and address vulnerabilities in code and infrastructure.
• Provide expert support on secure development practices to development teams.
• Ensure security of backend infrastructure and its public APIs.
• Supervise GitHub configuration in terms of secure development processes.
• Set up SAST tools (e.g., Software Composition Analysis, secret detection, CI/CD quality gates, etc.).
• Analyze attack vectors and prioritize remediation of project infrastructure vulnerabilities.

Requirements

• 1+ year of experience working with AWS (IAM, cloud architecture, etc.).
• 1+ year of experience securing Kubernetes environments.
• Experience with Cloudflare products (WAF, API Shield, etc.).
• Experience configuring SAST tools (SonarQube, CodeQL, etc.).
• Experience securing CI/CD processes in GitHub.
• Understanding and ability to analyze Infrastructure-as-Code (Terraform, Terragrunt, etc.).
• Experience in identifying and investigating information security incidents.
• Understanding of security-by-design principles.

Culture & Benefits

• Remote work from anywhere in the world.
• Competitive salary in EURO/USDT.
• 20 working days of paid vacation and paid sick leaves.
• Compensation for the purchase of necessary technical devices for the work.
• Stability, development, and participation in the company's growth.