DevSecOps Engineer

• Design, deploy, and manage advanced security solutions to protect cloud and IT environments supporting high-value financial transactions.
• Conduct and facilitate remediation of findings from web application penetration tests and cloud infrastructure security scans.
• Integrate security best practices into CI/CD pipelines, infrastructure automation, and containerized microservices orchestration.
• Proactively monitor and enhance security posture, addressing vulnerabilities and emerging threats to ensure robust protection.
• Collaborate with Engineering, DevOps, and Operations teams across New York, London, and Tel Aviv to embed security into development and operational workflows.
• Support responses to customer security questionnaires from Tier 1 financial institutions, ensuring accurate and timely input.
• Maintain and improve infrastructure automation and configuration management tools with a security-first approach.
• Support, enhance, and maintain production-level observability with a focus on security monitoring.
• Contribute to updating and improving our DevSecOps technology stack: AWS, Operating Systems, Kubernetes, Helm, Terraform, Python, Jenkins, and more.
• Participate in mutual SOC 2 Type II efforts, assisting with evidence collection and control implementation as part of a collaborative team.

• At least 4 years of experience as a DevSecOps Engineer or in a similar role focused on cloud and IT security.
• Proven experience in delivering and communicating complex security solutions to Engineering and Management alike.
• Additional industry experience in R&D, QA, or IT security - a plus.
• Team player with excellent communication skills, collaborating effectively with global teams and stakeholders.
• Hands-on experience in securing critical production systems and ensuring business continuity.
• Expertise in corporate information security practices, including identity management, access controls, and vulnerability management.
• Experience with compliance frameworks (e.g., SOC 2, ISO 27001, GDPR) and supporting audit processes.
• Broad understanding of security and networking principles.
• Familiar with Cloud (Ideally AWS) Security best practices & constraints.
• Proficient in at least one scripting language (e.g., Python, Bash) for automating security workflows.
• Familiar with modern observability tools, with an emphasis on security monitoring.
• Familiar with server system administration with a focus on security hardening.
• Strong interpersonal communication and written skills in English - a must.
• Exceptional troubleshooting and problem-solving skills in high-pressure environments.
• Self-motivated and able to thrive in a fast-paced, regulated environment.

• BS in Computer Science, Information Security, or a related field, or equivalent experience.
• Familiarity with security tools like AWS Security Hub, Qualys, or Nessus for scanning and remediation.
• Familiarity with Infrastructure as Code (IaC) on a cloud provider (preferably Terraform and AWS).
• Experience with Helm Charts, Argo CD and Kubernetes for secure container management and orchestration.
• Experience with CI/CD integrations, incorporating security into SCM and code review tools.
• Experience with cloud cost optimization from a security perspective.
• Familiarity with database security best practices and troubleshooting.

• We lead with purpose, while creating exceptional value
• We pursue big breakthroughs, responsibly
• We learn from the best and are unapologetically independent
• We are obsessed with the future and fanatical about executing today
• We play tough, with heart

• Super Smart: quality thinking and know what good looks like
• Badass: all in, get stuff done, and high standards
• Good Human: collaborative, open-minded, authentic and real, and pursue self-actualization

Mploy