Senior DevSecOps Engineer

Job not on LinkedIn

🔥 45 minutes ago

🌐 Ukraine, Poland – Remote

🇺🇦 Ukraine – Remote 🇵🇱 Poland – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

BOOSTA

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2019

🎯 Recruiter

💼 Consulting

👥 HR Tech

Recruitment • Consulting • HR Tech

BOOSTA is a talent solutions and recruitment consultancy that partners with organisations to solve technical and operational hiring challenges. They offer embedded recruitment services, consultative talent audits, specialist sourcing (Talent Stream with access to over 900k candidates), employer branding, DEI strategy, recruitment process engineering, and leadership coaching and training. BOOSTA emphasizes custom-designed, scalable talent programs, uses AI to support data-driven hiring and candidate assessment, and has delivered hires at scale for clients (for example, helping Trainline hire 150+ people in under 15 months).

📋 Description

• Launch, monitor, and analyze scans across code, dependencies, containers, and IaC • Triage findings and prioritize them based on real risk rather than only CVSS • Independently remediate vulnerabilities by updating dependencies, applying patches, hardening Docker/Kubernetes/IaC configurations, and creating repository pull requests • Coordinate complex fixes with development teams • Monitor SLA compliance and verify remediation through re-scans • Administer and maintain integrated SAST, DAST, SCA, and Secret Scanning tools • Process security alerts and investigate false positives • Review logs and work with existing SIEM/Wazuh rules • Escalate incidents to the SOC when needed • Tune existing WAF/Cloudflare rules according to established procedures

🎯 Requirements

• Hands-on experience with vulnerability management • Experience with vulnerability scanners such as Trivy, Snyk, SonarQube, Semgrep, OWASP ZAP, and Gitleaks, and understanding of how they work • Practical remediation skills, including updating packages, modifying Dockerfiles, changing Terraform/Helm, and creating basic code pull requests • Ability to create basic code PRs in Python, JavaScript, or another language • Confidence with Bash and Python for automating routine tasks and interacting with scanner APIs • Practical experience with Docker and Kubernetes • Understanding of CI/CD pipelines such as GitLab CI, GitHub Actions, or Jenkins • Basic understanding of cloud infrastructure and networking, including AWS/GCP/Azure, IAM, TLS, DNS, network segmentation, and firewall principles • Strong communication skills for assigning tasks, explaining finding criticality, and justifying remediation • Experience with Vault, SIEM, Cloudflare WAF/rate limiting, and OWASP Top 10 is a plus, not required

🏖️ Benefits

• Compensation for external courses and conferences • Access to the corporate library • Flexible schedule with start time anytime between 8:00–11:00 Kyiv time • Choice of Kyiv office, coworking in Lviv or Warsaw, or fully remote work • 28 working days of paid vacation per year • Up to 30 days of sick leave with medical confirmation • All state holidays • Medical insurance • Compensation for psychologist sessions • Ukrainian Victory Support program and other social initiatives • Regular online or offline team-building activities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume