[Hiring] Senior DevSecOps Engineer @JustMarkets

Role Description

We are looking for a Senior DevSecOps Engineer to join our Product Security team and help strengthen security across our software development lifecycle. In this role, you will:

• Design, implement, and maintain security integrations within CI/CD pipelines.
• Automate security workflows and improve the reliability and effectiveness of security controls.
• Work closely with Application Security, Cloud Security, DevOps, Platform, and Engineering teams.
• Ensure that security checks are integrated seamlessly into development workflows.
• Identify and address vulnerabilities efficiently.
• Provide developers with clear, actionable feedback.

This is a hands-on technical role offering the opportunity to influence how security tooling and automation are implemented across our engineering environment.

Qualifications

• At least 3+ years of hands-on experience in DevSecOps engineering roles.
• Strong understanding of Git workflows and CI/CD pipelines.
• Practical experience configuring static application security testing (SAST), software composition analysis (SCA), and secrets scanning.
• Ability to write, test, and maintain automation in a suitable language, such as Python, Bash, or Go.
• Experience implementing security checks or policies as code.
• Practical experience securing and hardening cloud environments with at least one major cloud provider (AWS preferred).
• Working knowledge of Linux and container-based build environments.
• Understanding of common application, dependency, and exposed-secret risks.
• Ability to maintain clear coverage records, operational runbooks, and reporting.
• Strong problem-solving, communication, and collaboration skills.
• English (B1), Russian (fluent).

Requirements

• Direct experience with GitLab CI/CD security integrations will be a plus.
• Experience with Terraform or Kubernetes security checks.
• Software supply-chain security, including software bills of materials (SBOMs), artifact signing, or build provenance.
• Experience integrating dynamic application security testing (DAST) or using AI-assisted tools to improve security automation.
• Experience in fintech, trading, payments, or other security-sensitive product environments.

Benefits

• 20 paid vacation days per year.
• 10 paid sick leave days per year.
• Public holidays as per the company's approved Public holiday list.
• Medical budget.
• Opportunity to work remotely.
• Professional education budget.
• Language learning budget.
• Wellness budget (gym membership, sports gear, and related expenses).