DevSecOps Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sumsub

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2015

💼 Consulting

⚖️ Legal

📦 Logistics

💰 $30M Series B - Sumsub on 2022-12

Consulting • Legal • Logistics

Sumsub is a compliance-focused technology company that provides SaaS solutions for transaction monitoring, product compliance, and related operational and pre-sales support to businesses. The company appears to operate an online platform with roles across operations, legal/compliance, and technical support, and targets other businesses with its services and tools.

📋 Description

• Design and operate vulnerability scanning pipelines across infrastructure and containers • Manage CVE correlation, asset ownership mapping, and remediation SLAs • Oversee infrastructure fleet inventory, policy coverage, and configuration drift • Develop correlation logic connecting vulnerabilities with business criticality and exploitability • Automate onboarding, asset reconciliation, and exception workflows • Build APIs, dashboards, and ChatOps/Slack integrations for self-service security controls • Define machine-checkable security standards • Automatically produce audit-ready compliance evidence from system operations • Partner with SOC, Infrastructure, and Platform teams to validate production controls • Protect developer experience while improving operational resilience

🎯 Requirements

• Senior platform-engineering mindset focused on internal tools, developer experience, and automated prevention • Hands-on experience running infrastructure scanning programs using Nessus, Qualys, Tenable, or equivalent • Experience with container image security using Trivy or similar tools • Proven experience with fleet inventory systems such as osquery or FleetDM • Experience with cloud platforms, preferably AWS • Experience with containerized and Kubernetes environments • Strong scripting ability in Python, Go, or Bash • Experience building custom APIs, dashboards, or system integrations • Deep understanding of CVEs, CVSS/EPSS scoring, and remediation workflows • Nice to have: CI/CD security gates using GitLab CI or GitHub Actions • Nice to have: Kubernetes admission control and Policy-as-Code frameworks such as Kyverno or OPA • Nice to have: compliance evidence automation for PCI DSS, SOC 2, or ISO 27001 • Nice to have: evolving security functions from manual reviews toward platform ownership

🏖️ Benefits

• Remote-first, trust-based culture • Work from the place that works best for you • No mandatory office days or attendance trackers • Optional offices or coworking spaces in some locations • Flexible working hours; no fixed 9-to-5 schedule • Birthday as a holiday • 10 personal days each year • Seven sick days without paperwork • Extra time off around Christmas and New Year • Personal development plans and learning opportunities • Coverage of role-specific events, including design conferences and marketing forums • Financial bonuses for marriage and welcoming a new baby • Fully covered team offsites a few times a year • Tools and hardware needed to do the work • Equal opportunity and diverse, inclusive workforce