Senior DevSecOps Engineer

Overview

As a Senior DevSecOps Engineer at Yapily, you will embed security across the SDLC for a scalable, multi-tenant platform on GCP and Kubernetes. You’ll shape the security posture, automate compliance, and enable fast, secure deployment for regulated financial services. You’ll work with cross-functional teams to harden cloud resources, guardrails, and incident response. This role offers a meaningful chance to impact a leading open banking platform used by global fintechs.

Pay / Benefits

• competitive pay & equity
• 25 days holiday plus increases
• hybrid and nomad working options
• private medical insurance
• mental health support
• learning budget (200) annually

Responsibilities

• Own security tooling across environments and CI/CD pipelines
• Design and enforce automated security guardrails and policies
• Hardening and securing GCP environment (IAM, network, configs)
• Automate compliance requirements with governance teams
• Automate vulnerability management and patch remediation in infra, apps, and dependencies
• Create and maintain secure golden-path templates for deployment
• Contribute security expertise to incident response
• Collaborate with feature teams to push code securely

Key requirements

• Cloud architecture & security in GCP with high availability
• API security practices and guidance for engineers
• Kubernetes security (GKE) including network policies and secrets management
• IaC with Terraform or OpenTofu
• Security tooling experience (Aqua, Falco, Prisma Cloud or similar)
• Automation and scripting in Python, Golang, or Shell
• CI/CD guardrails and pipelines with integrated security checks
• proactive mindset
• collaboration across teams
• strong communication
• GCP security
• IAM and network security
• Kubernetes security (GKE)

Report this job