A
Senior DevSecOps Engineer
Не указаноПолная занятостьSecurity EngineeringCreative Software
Lead product, application, cloud, AI, and cyber systems security for a creative technology platform. Shape security practices across product design, development, infrastructure, and operations.
Обязанности
- Perform threat modeling and secure design reviews from the earliest design stages with Product and R&D
- Embed security controls into CI/CD, products, and technology environments
- Define access, data exposure, injection, rate-limiting, and other security guardrails
- Secure cloud infrastructure across AWS, GCP, and Azure
- Own WAF and site protection, including rules, rate limiting, bot mitigation, and DDoS mitigation
- Lead detection, response, and incident handling across endpoint, cloud, and application layers
- Support SOC 2 and ISO 27001 compliance
Требования
- At least 4 years of experience in DevSecOps, application security, or security engineering
- Experience owning production security systems and embedding security into product design
- Hands-on security experience with GCP or AWS
- Practical knowledge of AI and LLM security, including model access, data leakage, and prompt injection
- Hands-on experience with WAF and site protection
- Scripting or automation skills in Python, Go, or Bash
- Fluent English
Будет плюсом
- Production security experience for generative AI or machine learning features
- Familiarity with AI gateways such as LiteLLM, OpenRouter, or Bedrock
- Experience with LLM observability tools
- Relevant CISSP or cloud security certification