Lead DevSecOps Engineer | Ukraine

We are looking for an experienced Lead DevSecOps Engineer who combines strong hands-on technical expertise with the ability to lead a team and deliver security solutions for international clients.

What we expect:

• 5+ years of hands-on commercial experience in DevSecOps, Cloud Security, or a related field.
• Strong expertise in DevSecOps and application security, including secure SDLC, vulnerability management, threat modeling, secrets management, IAM, and encryption.
• Extensive experience implementing and managing security tools within CI/CD pipelines, including SAST, DAST, SCA, SBOM, container and IaC scanning, with a focus on scalability and reducing false positives.
• Proven ability to design, implement, and maintain secure CI/CD pipelines using GitLab CI, GitHub Actions, Azure DevOps, Jenkins, or similar platforms, including reusable templates and secure-by-default practices.
• Solid experience with at least one major cloud platform (Azure, AWS, or GCP) and its security services.
• Hands-on experience with Docker, Kubernetes, and container security.
• Practical experience with Infrastructure as Code and configuration management tools such as Terraform, Ansible, and Helm.
• Strong scripting and programming skills in Python and Bash.
• Understanding of secure architecture principles and security best practices across cloud and on-premises environments.
• Experience defining and monitoring security metrics, including scan coverage, remediation timelines, and SLA compliance.
• Ability to translate technical security risks into clear business recommendations.
• Strong communication and stakeholder management skills, including leading workshops, presenting to senior stakeholders, and independently managing client-facing workstreams.
• Fluent English.

Nice to have:

• 1+ year of experience as a Team Lead or Tech Lead, including task allocation, technical reviews, and mentoring engineers.
• Previous consulting experience, ideally working with German or DACH-region clients.
• Familiarity with EU cybersecurity regulations and standards, such as NIS2, DORA, the Cyber Resilience Act, and BSI C5.
• Experience designing and implementing security controls for modern GenAI architectures.
• Hands-on experience integrating AI into DevSecOps processes, including AI-assisted vulnerability triage, secure code reviews, automated remediation, threat modeling, and security workflows.
• Experience measuring the effectiveness of AI-driven security solutions, including accuracy, false-positive rates, and remediation time.
• Experience establishing secure practices for AI coding assistants such as GitHub Copilot, Cursor, or Claude Code, including data protection, security guardrails, MCP integrations, and AI-generated code controls.
• Relevant DevSecOps or Cloud Security certifications.
• Experience selecting and implementing ASPM, CNAPP, CWPP, or CSPM solutions.