DevOps Engineer (Security Focus)
The company is looking for a DevOps Engineer with a strong security focus to join its DevOps team. This is a hands-on role focused on application security and CI/CD pipeline hardening, ideal for someone who wants to further develop expertise in security-related areas while working with modern tooling and engineering teams.
In this position, the successful candidate will work as part of the DevOps team while closely collaborating with the Security team, which will be the primary stakeholder for security-related initiatives and improvements.
- Design and implement security checks in CI/CD pipelines (GitHub, GitLab).
- Configure and maintain SAST, SCA, and container scanning tools (Trivy, Dependabot).
- Identify and remediate vulnerabilities in applications and container images.
- Support container image scanning and image signing practices.
- Write and maintain automation scripts (Python, Bash).
- Collaborate with engineering teams to embed security into development workflows.
- 3+ years of experience in DevOps, DevSecOps, Infrastructure Engineering, Platform Engineering, Security Engineering, or similar roles (required).
- Hands-on experience with CI/CD pipelines (GitHub or GitLab) (required).
- Strong hands-on experience with security tools, including SAST, SCA, container scanning, and related CI/CD security tooling in production environments (required).
- Practical experience with Kubernetes and Helm (required).
- Hands-on experience with provisioning and maintaining infrastructure in cloud environments (AWS, GCP, Azure, or OCI) (required).
- Hands-on experience with Terraform and Ansible for infrastructure automation, provisioning, and configuration management (required).
- Basic scripting skills (Python, Bash) (required).
- Understanding of OWASP Top 10 (required).
- Strong interest in security and a security-first mindset (required).
- Ability and willingness to work closely with Security teams and drive security-related improvements within engineering workflows (required).
- Exposure to Kubernetes security tools (Kyverno, OPA, StackRox) (nice-to-have).
- Experience with GitOps tools such as ArgoCD or Flux2 (nice-to-have).
- Background in securing infrastructure against PCI DSS requirements (nice-to-have).
- Private health insurance
- Sports benefits
- Comprehensive Mental Health Program
- Free English lessons (online)
- Local language courses
- Paid time off
- Maternity leave support
- Referral program rewards
- Upskilling, internal workshops, and participation in professional conferences and corporate events
SOFTSWISS is a global tech expert with over 15 years of experience in providing innovative iGaming solutions. The company offers comprehensive software for online casinos, sports betting, and affiliate management. To expand its global presence, in 2024, SOFTSWISS acquired Turfsport, a leading South African betting software provider, and a significant stake in Ously Games GmbH, the company behind the fastest-growing European social casino, SpinArena.net. Additionally, the company appointed Formula 1 legend Rubens Barrichello as Non-Executive Director in Latin America, focusing on Brazil's growing market. SOFTSWISS is committed to transforming the iGaming and entertainment industry for the better through tech innovations. The Team helps operators and providers establish enduring partnerships by building profitable and scalable businesses.
