Senior DevSecOps Engineer

Stack

Responsibilities

• ▹Design, implement and manage security solutions across the SDLC, with a focus on CI/CD automation and API security
• ▹Champion security best practices within engineering, DevOps, SRE and IT teams
• ▹Identify and remediate security vulnerabilities (OWASP Top 10) through threat modelling, vulnerability assessments and penetration testing
• ▹Develop and maintain security monitoring and alerting solutions
• ▹Define and enforce secure coding standards
• ▹Provide training and mentorship to development teams
• ▹Participate in the on-call rotation to maintain 24/7 service reliability

Requirements

• ▹Experience designing security solutions across the SDLC and CI/CD pipelines
• ▹Experience remediating OWASP Top 10 vulnerabilities
• ▹Experience with threat modelling, vulnerability assessments and penetration testing
• ▹Experience defining secure coding standards

Soft skills

What we offer

• ▹Remote work
• ▹Generous PTO
• ▹Wellness and learning allowances
• ▹Annual Airalo Away retreat
• ▹Paid on-call rotation with standby fees and overtime pay
• ▹Delayed on-call start, no duties in the first 6 months
• ▹Guaranteed rest periods following night incidents
• ▹Shared on-call load split between weekdays and weekends

About the company

Airalo is the world's first and largest eSIM store, helping travellers stay connected seamlessly in over 200 countries and regions.