DevSecOps Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
First DevSecOps at Tivita creating a secure foundation for a scalable infrastructure. Establishing security measures and collaborating with engineering teams for enhanced health management solutions.
Responsibilities:
- You will be Tivita's first dedicated DevSecOps, responsible for establishing the foundations of a secure, predictable, resilient, and scalable infrastructure.
- Create a DevSecOps foundation that enables structured growth without hindering the development team's velocity.
- Identify critical risks, define realistic priorities, and create roadmaps that balance speed, reliability, and security.
- Map the attack surface and assess the current state of infrastructure and security pipelines.
- Identify critical vulnerabilities, exposures of sensitive data, and inadequate access policies.
- Implement IAM and least-privilege policies in cloud environments.
- Validate, automate, and test backup and disaster recovery procedures.
- Integrate essential security stages into CI/CD pipelines (Secrets Scan, SAST, SCA, IaC Scan) without introducing blocking gates at the outset.
- Protect applications against the OWASP Top 10 using WAFs, rate limiting, and anti-bot measures.
- Implement encryption at rest and in transit, and deploy DLP controls on critical interfaces.
- Establish canary releases, automatic rollback, and secure deployment practices.
- Build a SIEM layer and create incident response playbooks.
- Review LGPD/privacy policies, onboarding/offboarding processes, and governance.
- Engage the engineering team with contextualized training and security testing.
- Implement the “paved road” concept to provide autonomy and reduce dependence on Infra/Sec.
Requirements:
- 5+ years of experience in DevOps, SRE, cloud infrastructure, or security in critical environments
- Deep security knowledge: hands-on experience with security in CI/CD pipelines, secrets management, IaC scanning, vulnerability assessment, and threat modeling
- Google Cloud Platform (GCP): advanced hands-on experience with IAM, Compute Engine, Cloud Storage, Cloud SQL, VPC, networking, and security
- Infrastructure as Code (IaC): advanced proficiency with Terraform or CloudFormation; ability to structure IaC for multiple environments
- CI/CD and Automation: hands-on experience with GitHub Actions, GitLab CI, or Jenkins; automation of security pipelines
- Containerization and Orchestration: strong practical knowledge of Docker and Kubernetes; ability to implement container security
- Security Tools: hands-on experience with SAST (Semgrep), SCA (Snyk, Aikido), secrets scanning (git-leaks), IaC scanning (Trivy), and WAFs
- Systems Thinking: proven ability to identify structural risks, prioritize trade-offs (cost vs. security vs. speed), and create realistic roadmaps
- Strategic Communication: ability to explain technical decisions to non-technical stakeholders and to clearly structure 30/60/90-day plans
Benefits:
- Not specified
Similar Jobs
SRE / DevOps Engineer (Mid-level)
SRE / DevOps Engineer supporting high-criticality environments and cloud-native platforms. Collaborating with squads for reliable software delivery.
Deployment Engineer
Engineer responsible for the deployment and operational infrastructure of Multigres, a distributed Postgres platform. Building and maintaining the Multigres Operator on Kubernetes while collaborating across teams.
Senior Software Engineer – DevOps, Security
Senior Software Engineer at InsuraMatch focusing on DevOps and security. Leading team responsible for strengthening security posture and operational visibility across infrastructure.
DevOps Engineer – Frameworks and Platform Team
DevOps Engineer at Grupo SysMap focusing on Azure technologies, creating reusable DevOps templates and automating frameworks.
Chassis Design & Release Engineer, Junior
Chassis Design & Release Engineer developing chassis systems for diverse industries. Collaborating with cross-functional teams at ALTEN Mexico to improve design and release processes.
Analista de Sistemas de Automação – DevOps – Pleno
DevOps Analyst managing operational support and infrastructure automation for clients. Collaborating with development teams to integrate DevOps practices and ensure system stability.
DevOps Engineer – L4
DevOps Engineer responsible for infrastructure, CI/CD, and backend services for a major university platform. Join Robots and Pencils, building impactful digital solutions.
Senior SRE Analyst
Senior SRE Analyst at YDUQS ensuring cloud infrastructure reliability and best practices. Collaborating with development teams and managing CI/CD processes in cloud environments.
Senior DevOps Engineer – Azure
Senior Azure DevOps Engineer designing and scaling cloud infrastructure on Azure. Focused on secure processing of healthcare data within a collaborative international team.
DevOps Engineer, Release Engineering – Platform, CI/CD
L3 and L4 DevOps Engineers building CI/CD systems to ensure efficient code delivery at Zapier. Focused on improving reliability and scalability of deployment workflows with AI considerations.
DevOps Engineer
Dev Ops Engineer responsible for developing, integrating, and supporting internal systems across the organization. Bridging development and operations to ensure data reliability and streamline automation.
DevOps Specialist
DevOps Specialist working on strategic migration to Azure DevOps and cloud infrastructure governance. Focus on Kubernetes, application security, and performance monitoring.
Site Reliability Engineer, Core Streaming
Site Reliability Engineer ensuring fast and reliable Kafka data streaming infrastructure management at Yelp. Collaborating with teams to enhance data processing reliability in a scalable manner across platforms.
DevOps Manager
DevOps Manager leading a team to support Azure cloud solutions for government healthcare projects. Driving innovation and best practices in a fast-paced environment.
Senior DevOps Engineer, Azure Cloud
Senior DevOps Engineer responsible for Azure cloud infrastructure and CI/CD pipeline management. Collaborating across teams to implement DevOps practices in cloud-native application deployment.
SRE / DevOps Engineer
SRE / DevOps Engineer working with cloud-native platforms and CI/CD pipelines. Ensuring reliability and performance while collaborating with agile teams.
Senior Multi-Cloud DevOps Engineer
Senior Multi-Cloud DevOps Engineer working on cybersecurity projects in a multi-cloud environment. Requires building and maintaining scalable cloud infrastructure across AWS, GCP, and OCI.
Senior Multi-Cloud DevOps Engineer
Senior Multi-Cloud DevOps Engineer for cybersecurity projects in multi-cloud environment. Collaborating with application, platform, and reliability teams on complex solutions.
Senior Site Reliability Engineer, SRE
Senior Site Reliability Engineer at Fable ensuring reliable and scalable infrastructure for AI-driven accessible products. Collaborating across teams to improve operational excellence and platform engineering.
Senior DevOps Engineer
Senior DevOps Engineer managing Zipline's cloud infrastructure and CI/CD systems. Collaborating with engineering teams to ensure platform reliability and scalability.