Source description
About the role
We are looking for a motivated DevSecOps Engineer to strengthen our infrastructure and security posture across the cloud and CI/CD ecosystem. The ideal candidate has hands-on experience in Kubernetes, cloud-native security, and compliance automation, with strong technical expertise in vulnerability management, observability, and secure software delivery aligned with PCI-DSS and SOC 2 standards.
Key Responsibilities
Design, implement, and secure CI/CD pipelines following DevSecOps principles and GitOps workflows (ArgoCD).
Integrate security tools across build and deployment pipelines for SAST, DAST, dependency scanning, and CVE management.
Manage and harden containerized workloads on Kubernetes and Docker, implementing runtime security controls and RBAC policies.
Automate compliance checks and audit data collection to maintain PCI DSS and SOC 2 readiness.
Deploy, monitor, and secure infrastructure across AWS, GCP, or Azure environments.
Configure and operate observability and security monitoring tools (Prometheus, Grafana, OpenTelemetry, Loki, Wazuh).
Collaborate with the security team to establish threat detection, incident response, and log correlation workflows using SIEM tools.
Strengthen cluster and network security through Istio, NetworkPolicies, and zero-trust design principles.
Required Skills & Qualifications
1–3 years of experience in DevSecOps, Security Engineering, or Cloud Security roles.
Strong understanding of Kubernetes, Docker, Linux, and networking fundamentals.
Experience with security scanning, vulnerability management, and CVE patch automation.
Working knowledge of GitOps (ArgoCD), CI/CD tools (GitHub Actions, Jenkins, etc.), and IaC security (Terraform, Helm).
Familiar with cloud provider security services (AWS IAM, Security Hub, GCP Security Command Center, etc.).
Understanding of monitoring, alerting, and tracing stacks — Prometheus, Grafana, Loki, OpenTelemetry.
Practical exposure to compliance frameworks (PCI DSS, SOC 2) and audit readiness processes.
Excellent debugging, documentation, and cross-functional communication skills.
Good to Have
Hands-on with Wazuh, Trivy, or other vulnerability/scanning tools.
Knowledge of service mesh security (Istio mTLS, certificate rotation).
Exposure to SIEM, threat intelligence, or incident response workflows.
Cloud certifications (AWS/GCP/Azure) or Kubernetes certifications (CKA/CKS) are a plus.
More at Dodo Payments