Sr. DevSecOps Engineer- Reliability & Security (Remote from Bulgaria)

1 hour, 58 minutes ago
Full-time
Senior
DevOps and Infrastructure
Smartsheet

Smartsheet

Smartsheet provides an enterprise work management platform that enables teams to efficiently manage projects, automate processes, and enhance collaboration through a user-friendly interface that combines spreadsheet functionality with advanced workflow...

Internet Software & Services
1K-5K
Founded 2005

Description

  • Design, build, maintain, and improve secure, scalable, highly available infrastructure in a multi-cloud environment, primarily AWS, using Infrastructure as Code.
  • Automate threat detection, incident response, and vulnerability management to enable rapid, machine-speed security operations.
  • Architect and secure CI/CD pipelines by integrating automated security testing and feedback into the software delivery process.
  • Manage and secure Kubernetes-based container orchestration platforms, including container hardening from registry to runtime.
  • Lead security and reliability incidents as a technical lead, driving resolution and documenting blameless post-mortems with preventative actions.
  • Implement and automate technical controls to support continuous compliance with frameworks such as FedRAMP, SOC 2, and ISO 27001.
  • Mentor engineers and serve as a subject matter expert for security and reliability practices across the organization.
  • Champion operational excellence and security ownership within the broader engineering organization.

Requirements

  • 8+ years of progressive experience in technology, including at least 5 years in a hands-on senior role in Site Reliability Engineering, DevOps, or Security Engineering.
  • Bachelor’s or master’s degree in Computer Science, Engineering, or a related field, or equivalent industry experience.
  • Expert-level proficiency in at least one major cloud provider, preferably AWS, with deep knowledge of core infrastructure and security services.
  • Expert-level proficiency with Infrastructure as Code, particularly Terraform.
  • Expert-level proficiency in a scripting or programming language such as Python, Go, or Ruby, with experience building automation and custom tooling.
  • Deep experience with containerization and orchestration technologies, especially Kubernetes, including securing containerized environments.
  • Proficiency with security operations tools such as SIEM, EDR, and vulnerability scanning technologies.
  • Experience integrating SAST, DAST, and SCA tools into CI/CD pipelines.
  • Ability to troubleshoot complex problems in high-pressure production environments.
  • Excellent verbal and written communication skills with a collaborative approach.
  • Fluency in English is required.
  • Must be legally eligible to work in Bulgaria on an ongoing basis.
  • Advanced certifications such as CISSP, CISM, OSCP, or cloud-specific security certifications are preferred.
  • Experience with compliance frameworks such as FedRAMP, ISO 27001, or SOC 2 is preferred.

Benefits

  • Remote work from Bulgaria.
  • Opportunity to work on a globally impactful security operations team at a large-scale software company.
  • Chance to shape and mature security and reliability practices across the organization.
  • Inclusive employer committed to equal opportunity and consideration for qualified applicants.
  • Support for interview accommodations to help ensure a comfortable candidate experience.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Staff Security Engineer, Product Security

Mozilla 251-1K Internet Software & Services

Mozilla is hiring a remote-friendly Staff Security Engineer to protect Firefox, Mozilla VPN, and other mission-critical products by reducing application risk and strengthening security across the software lifecycle.

AWS Azure Burp Suite CI/CD GCP Go Java JavaScript Penetration Testing Python
13 minutes ago

Manager, Vulnerability & Data Security

Marqeta 251-1K Diversified Financial Services

Marqeta is hiring an Information Security Manager to lead vulnerability management and build a data security program that protects critical cloud-based systems, services, and data across the company.

AWS Azure CI/CD Databricks DevSecOps GCP SIEM Snowflake
28 minutes ago

Release Engineer

Mozilla 251-1K Internet Software & Services

MZLA Technologies Corporation is hiring a Release Engineer to build and maintain the automation systems that power Thunderbird’s software releases across desktop and mobile platforms in an open-source, globally distributed environment.

Android AWS C C++ CI/CD CSS Docker GCP Git iOS Java JavaScript Kotlin Kubernetes Linux macOS Mercurial Python Rust Shell Scripting
28 minutes ago

DevSecOps Engineer

Typeform 251-1K Internet Software & Services

Typeform is hiring a DevSecOps Engineer to help secure the development and deployment of its AI-powered platform as the company scales.

AWS Azure CI/CD DevSecOps GCP Kubernetes Secrets Management
43 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers