Senior DevSecOps Engineer

About the role

We are seeking a hands‑on Senior DevSecOps Engineer to strengthen and scale security initiatives across our fully cloud‑native AWS environment. You will work closely with security and engineering teams to embed secure‑by‑default practices, automate controls, and address AI‑specific risks as we expand our use of large language models.

Key responsibilities

• Continuously improve security of AWS and Kubernetes platforms, including IAM, RBAC, encryption, secrets management, and network controls using policy‑as‑code.
• Manage edge security such as traffic filtering, WAF configuration, and external exposure.
• Conduct security reviews of new services, architectural changes, and platform components.
• Integrate automated security controls into SDLC and CI/CD pipelines (SAST, dependency and container scanning, policy enforcement).
• Lead vulnerability management: detection, assessment, prioritisation, and reporting.
• Define and implement security controls for AI infrastructure (gateways, model‑control‑plane servers, model proxies) and mitigate AI‑specific risks like prompt injection, data leakage, and agent privilege escalation.
• Develop and maintain security tooling and automation, leveraging AI‑assisted solutions where possible.

Required profile

• 5+ years of hands‑on experience in DevSecOps, cloud security, or related fields.
• Strong operational experience with AWS and Kubernetes in production.
• Proven ability to implement security in Infrastructure as Code and CI/CD workflows.
• Solid understanding of cloud security fundamentals (access control, secrets management, network security, encryption).
• Deep knowledge of AI/LLM security risks and practical experience securing AI components.
• Excellent communication skills in English and ability to collaborate with engineering and product teams.

Required skills

• AWS
• Kubernetes
• IAM, RBAC, encryption, secrets management
• WAF and network security controls
• Infrastructure as Code (e.g., Terraform, CloudFormation)
• CI/CD pipelines (Git, Jenkins, GitHub Actions)
• SAST, dependency scanning, container scanning
• AI/LLM security (prompt injection, data leakage mitigation)
• Scripting (Python, Bash, etc.)

What we offer

• Hybrid work model with offices in Limassol and Almaty, plus full‑remote option.
• Opportunity to shape security strategy for cutting‑edge AI initiatives.
• Collaborative, innovative environment focused on scalable, automated solutions.