Senior DevSecOps Engineer
Vivid Money23 days ago
Remote, EMEA or Barcelona, SpainSenior
Responsibilities
- Improve the security of AWS and Kubernetes platforms through secure-by-default controls and policy-as-code.
- Strengthen IAM, RBAC, encryption, secrets management, network security, edge security, WAF configuration, and external exposure management.
- Conduct security reviews of new services, architectural changes, and platform components.
- Embed SAST, dependency scanning, container scanning, and policy enforcement into SDLC and CI/CD workflows.
- Lead vulnerability detection, assessment, prioritization, and reporting processes.
- Build automation and AI-assisted tooling to improve security reviews and reduce manual work.
- Implement security controls for AI infrastructure, including LLM gateways, MCP servers, model proxies, and agent workflows.
- Identify and mitigate AI-specific risks such as prompt injection, data leakage, model abuse, and agent privilege escalation.
- Collaborate with security, engineering, and product teams on scalable security improvements and long-term direction.
Requirements
- At least 5 years of hands-on experience in DevSecOps, cloud security, or a related field.
- Strong production experience operating AWS and Kubernetes.
- Experience implementing security in infrastructure-as-code and CI/CD workflows.
- Solid understanding of access control, secrets management, network security, and encryption.
- Familiarity with container security and common application security risks.
- Deep understanding of AI and LLM security risks, with hands-on experience securing LLM gateways, MCP servers, or agent-based workflows.
- Comfort with scripting and Git-based development environments.
- Clear written and spoken English communication skills.
- Ability to work effectively with engineering and product teams.
- Experience scaling security practices in fast-growing or regulated environments is preferred.
- Experience building internal security tooling or automation from scratch is preferred.
Benefits
- Hybrid work from the Limassol office or fully remote work outside office locations.
- Relocation support to Cyprus, including visa and relocation package when needed.
- Learning and development budget.
- Fully paid vacation and sick leave.
- Sports compensation.
- Growth opportunities, significant responsibility, and immediate ownership.
Tech Stack
Categories
About Vivid Money
Vivid Money builds a European finance platform for SMEs and individuals, combining business banking (multi-currency accounts, cards with cashback, payments, invoicing, and bookkeeping) with consumer investing in stocks, ETFs, and crypto. Founded in 2019 and headquartered in Berlin, it operates across Europe and is privately held; its entities are regulated as an Electronic Money Institution in Luxembourg and an Investment Firm in the Netherlands. Revenue comes from account, card, and brokerage services.