DevSecOps Engineer, SentinelOps, DevEx, Cloud Enablement

🔥 12 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

eMAG

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2001

🛍️ eCommerce

🏪 Marketplace

eCommerce • Marketplace

eMAG is the commercial name of S. C. DANTE INTERNATIONAL S. A. , a Romanian company headquartered in Bucharest. eMAG operates as a leading e-commerce platform and online marketplace in Romania and the region, offering a broad range of products and services through its website and mobile apps. The provided text is from eMAG’s careers and privacy pages, highlighting rapid growth, frequent hiring, a focus on innovation and high-performance teams, and detailed data protection and recruitment policies.

📋 Description

• Embed security practices across the entire SDLC - from code review through to production deployment; • Integrate and maintain security tooling in GitLab CI/CD pipelines, delivered as reusable templates rather than per-team bespoke work; • Detect and remediate security issues within infrastructure and CI/CD pipelines; harden merge and approval rules in GitLab; • Contribute to threat modeling practices and help teams apply them to their own designs; • Integrate and maintain tools for risk analysis, vulnerability detection, prevention, and remediation. • Operate and maintain Kubernetes clusters deployed both on-premises and in Cloud, ensuring high availability, scalability, and security; • Implement disaster recovery and high availability strategies across environments; • Automate operational workflows and infrastructure management via scripting (Bash, Python, Go); • Document infrastructure configurations, deployment procedures, and operational runbooks; • Focus on managing infrastructure with IaC tools (terraform/terragrunt), standardizing reusable GitLab CI/CD pipelines; • Use AI and purpose-built agents to analyze our multi-account, multi-cloud estate, correlating findings, misconfigurations and drift at a scale, to shorten time-to-fix; • Turn cross-account analysis into output the teams owning the affected workloads can act on directly; • Set the standards for using agentic tooling safely against production infrastructure - scoped permissions, guardrails and human review where it matters. • Design and enforce preventive controls across multiple cloud environments - organization-level deny and audit policies, SCPs, GCP Organization Policies, account factory standards; • Write infrastructure and policy as code using Terraform; scripting and automation are core to the day-to-day, not an occasional extra; • Build compliance drift detection, alerting, and run periodic compliance reviews with a focus on NIS2, DORA and GDPR obligations; • Manage cloud security posture - triage and drive remediation of findings from cloud security tools. • Build and maintain security monitoring, alerting and incident response playbooks; help consolidate cloud-native detections into a unified SIEM; • Implement observability: monitoring, alerting and logging to support proactive incident response; • Manage vulnerability assessments, coordinate remediation with development teams and track resolution against SLAs; • Support and coordinate periodic security audits and penetration testing activities; • Participate in production incident response and in the on-call rotation alongside the team.

🎯 Requirements

• 3+ years of hands-on experience as a DevOps, DevSecOps, Platform, SRE or Security Engineer - or as a developer who moved decisively towards infrastructure and security. • Practical experience with at least one major cloud provider and solid Linux systems administration. • Proficiency with Terraform for infrastructure as code. • Experience with cloud security tools (AWS GuardDuty, Security Hub, GCP Security Command Center). • Experience with containers and orchestration (Docker, Kubernetes) and with CI/CD pipelines - GitLab CI, Jenkins or similar. • Strong security fundamentals: IAM, encryption, network security, secrets management. • Experience with monitoring, logging and alerting solutions; working knowledge of HA, disaster recovery and business continuity concepts. • Comfort using AI tools as part of your daily engineering workflow. • Initiative and the ability to self-prioritize in a fast-moving environment.

🏖️ Benefits

• Medical subscription: Medicover or Regina Maria. • A flexible budget that you can invest in yourself as you wish: meal tickets, holiday tickets, cultural vouchers, private pension, foreign language classes, eMAG, Fashion Days, Therme & Genius, membership to different gyms or even professional development classes. • Different discounts from our partners: banking, mobile, dental medicine or wellness. • Access to the Bookster library and free credits on the Hilio psycho-emotional health platform. • An accelerated learning environment, with access to over 100.000 curated online resources and platforms, learning academies and development programs. • New headquarters, where sleek design, natural light, and versatile spaces create an energizing and comfortable environment for hybrid work.