Senior DevSecOps Engineer
Vivid Money23 days ago
Remote, Worldwide or Barcelona, SpainSenior
Responsibilities
- Improve the security of AWS and Kubernetes platforms through secure-by-default policy-as-code.
- Strengthen IAM, RBAC, encryption, secrets management, network security, edge security, WAF configuration, and external exposure management.
- Conduct security reviews of new services, architectural changes, and platform components.
- Embed automated security controls into software development and CI/CD workflows, including SAST, dependency scanning, container scanning, and policy enforcement.
- Lead vulnerability detection, assessment, prioritization, and reporting processes.
- Build security automation and AI-assisted tooling to improve security reviews.
- Define security controls for AI infrastructure components, including LLM gateways, MCP servers, and model proxies.
- Identify and mitigate AI-specific risks including prompt injection, data leakage, model abuse, and agent privilege escalation.
- Collaborate with security, engineering, and product teams on scalable security improvements and long-term direction.
Requirements
- At least 5 years of hands-on experience in DevSecOps, cloud security, or related fields.
- Strong hands-on experience operating AWS and Kubernetes in production.
- Experience implementing security in infrastructure-as-code and CI/CD workflows.
- Solid understanding of access control, secrets management, network security, and encryption.
- Familiarity with container security and common application security risks.
- Deep understanding of AI/LLM security risks, including prompt injection, data leakage, model abuse, and agent privilege escalation.
- Hands-on experience securing AI infrastructure components such as LLM gateways, MCP servers, or agent-based workflows.
- Comfort with scripting and Git-based development environments.
- Clear written and spoken English communication skills and the ability to work with engineering and product teams.
- Preferred experience scaling security practices in fast-growing or regulated environments and building internal security tooling or automation from scratch.
Benefits
- Hybrid work from the Limassol office or fully remote work outside office locations.
- Relocation support to Cyprus, including visa and relocation package when needed.
- Learning and development budget.
- Fully paid vacation and sick leave.
- Sports compensation.
- Growth opportunities, significant responsibility, and immediate impact in an AI-native regulated fintech environment.
Tech Stack
Categories
About Vivid Money
Vivid Money builds a European finance platform for SMEs and individuals, combining business banking (multi-currency accounts, cards with cashback, payments, invoicing, and bookkeeping) with consumer investing in stocks, ETFs, and crypto. Founded in 2019 and headquartered in Berlin, it operates across Europe and is privately held; its entities are regulated as an Electronic Money Institution in Luxembourg and an Investment Firm in the Netherlands. Revenue comes from account, card, and brokerage services.