Senior DevSecOps Engineer (Remote)

About the role

BairesDev is seeking a Senior DevSecOps Engineer to embed security throughout the software development lifecycle. The role is fully remote and focuses on automating security controls, governing compliance, and protecting cloud‑native environments.

Key responsibilities

• Integrate automated security scanning and vulnerability assessment tools (e.g., Snyk, Trivy, Aqua) into CI/CD pipelines.
• Codify security standards and governance policies using Policy as Code frameworks such as Open Policy Agent.
• Develop and maintain secure Infrastructure as Code (IaC) modules and hardened container image pipelines.
• Implement and rotate enterprise‑wide secrets management and sensitive data protection strategies.
• Conduct threat modeling and architectural reviews for cloud‑native workloads.

Required profile

• Minimum 4 years of experience in DevSecOps, DevOps, or cybersecurity engineering.
• Proven expertise integrating security tooling like Snyk, Trivy, or Aqua into CI/CD pipelines.
• Hands‑on experience with Policy as Code (OPA or similar) and secrets management.
• Deep understanding of container security and cloud‑native protection strategies.
• Advanced proficiency in English.

Required skills

• Snyk
• Trivy
• Aqua
• CI/CD pipelines
• Open Policy Agent (OPA)
• Policy as Code
• Secrets management
• Infrastructure as Code (IaC)
• Container security
• Cloud‑native environments

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Hardware and software setup for home office.
• Flexible schedule.
• Paid parental leave, vacations, and holidays.
• Multicultural environment with top global talent.
• Mentorship, promotion pathways, and skill‑development opportunities.