2 месяца назад
DevSecOps Engineer (GCP)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
DevSecOps Engineer (GCP): Implementing and managing DevSecOps practices across the SDLC with an accent on CI/CD pipeline security and cloud infrastructure hardening. Focus on automating security checks, ensuring compliance with SOC 2/ISO 42001, and securing containerized environments in a high-growth startup.
Location: Toronto
Company
is a fintech startup backed by top-tier Silicon Valley investors, building an AI-driven accounting platform to automate enterprise financial processes.
What you will do
- Implement and manage DevSecOps practices across the entire Software Development Lifecycle (SDLC) using a shift-left approach.
- Design and harden CI/CD pipelines, including GitHub Actions, with minimal permissions and OIDC integration.
- Enforce security checks such as SAST, dependency scanning, and secret scanning to maintain build integrity.
- Secure GCP cloud infrastructure by applying the principle of least privilege, VPC firewall configurations, and secret management.
- Oversee container hardening, artifact signing, and vulnerability scanning to ensure supply chain security.
- Maintain documentation and controls to align with compliance frameworks like SOC 2 and ISO 42001.
Requirements
- 4+ years of experience in DevSecOps, Security Engineering, or CI/CD pipeline security.
- Proven experience securing cloud environments, specifically Google Cloud Platform (GCP).
- Strong practical experience with hardening CI/CD systems like GitHub Actions.
- Proficiency in Golang, TypeScript, or Python for automation and development.
- Familiarity with compliance standards such as SOC 2, PCI DSS, or ISO 42001.
- Ability to thrive in the fast-paced environment of a startup.
Culture & Benefits
- Opportunity to work with a team of industry veterans from top tech companies like Amazon, Google, and Netflix.
- Direct impact on a product backed by leading VCs like Kleiner Perkins.
- Fast-paced, high-intensity startup environment focused on solving complex enterprise accounting challenges.
- Commitment to equal opportunity and inclusive hiring practices.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →