Senior DevSecOps Engineer

Summary

Join Pleo's growing team as a Staff DevSecOps Engineer and play a crucial role in securing our platform and customer data. You will own the vision for pipeline tooling and infrastructure, focusing on cloud and cluster hardening. Responsibilities include defining secure solutions, improving auto-remediation, collaborating with DevX and SRE teams, and driving organization-wide security initiatives. The ideal candidate possesses expertise in CI/CD pipeline security, Kubernetes and AWS environments, and cloud service security. While specific technology skills are valued, a passion for the field and a willingness to learn are paramount. Pleo offers a flexible and supportive work environment with various benefits.

Requirements

• You are comfortable with at least one programming language (Python, TypeScript, Kotlin, Golang) and have foundations with application development
• Expertise with project ownership for fully automating CI/CD pipelines security checks end-to-end, from code commits to production
• Experience with hardening, configuring and troubleshooting Kubernetes and AWS environments
• Strong cloud service knowledge. You understand how to secure all the “meshy” things from sidecars, microservices to service mesh, and you are familiar with the cloud shared responsibility model. You're comfortable balancing the tradeoff considerations with regard to cost, security, and deployment complexity

Responsibilities

• Help define how our engineering teams build secure solutions by automating guardrails throughout our entire pipeline
• You’ll be in charge of our Infrastructure as Code security policies, improve auto-remediation for issues and occasionally called to directly help developers on remediation
• Deep dive into various security subjects related to hardening our Kubernetes & AWS infrastructure at Pleo. Then design, implement and give your recommendation on actions
• Collaborate closely with our DevX and SRE teams to create automated continuous integration (CI) and continuous delivery (CD) around security checks
• Drive organization-wide security initiatives related to security automation
• Plan, rank, and manage the specialization security roadmap
• Collaborate on the planning and executing projects related to our security objectives
• Balance controls against our data classifications while providing tactful friction to meet the needs of the company

Preferred Qualifications

• Java or Kotlin proficiency and experience with securing applications running on JVM
• Experience with PCI DSS, GDPR, or PSD2 technical requirements such as proper network segmentation and authorization mechanism

Benefits

• Your own Pleo card (no more out-of-pocket spending!)
• Lunch is on us - with catering in our Lisbon, Copenhagen and London offices or a monthly lunch allowance paid directly together with your salary in other markets 🍜
• Private health insurance to ensure you’re fit in body and mind to do your best work
• Option to purchase 5 additional days of holiday through a salary sacrifice
• Wellbeing days - fully paid days off designed for a slower pace, allowing you to take time to recharge and prioritise self-care
• We’re trialling MyndUp to give our employees access to free mental health and wellbeing support with great success so far ❤️‍🩹
• Access to LinkedIn Learning - acquire new skills, stay abreast of industry trends and fuel your personal and professional development continuously
• Paid parental leave - we want to make sure that we're supportive of families and help you feel that you don't have to compromise your family due to work 👶