DevSecOps Engineer

Why Valtech? We’re the experience innovation company - a trusted partner to the world’s most recognized brands. To our people we offer growth opportunities, a values-driven culture, international careers and the chance to shape the future of experience.  THE OPPORTUNITY At Valtech, you’ll find an environment designed for continuous learning, meaningful impact, and professional growth. Whether you're pioneering new digital solutions, challenging conventional thinking or building the next generation of customer experiences, your work will help transform industries.  We are proud of:  * The work we do and the innovation we drive  * Our values of share, care and dare  * A workplace culture that fosters creativity, diversity and autonomy  * Our borderless, global framework, which enables seamless collaboration    THE ROLE   As a DevSecOps Engineer, you will be the link between development, operations, and security. You will work with delivery teams to embed security controls and best practices into pipelines, automate compliance, and ensure our platforms are reliable, resilient, and secure. You will participate in architecture discussions, help detect and remediate vulnerabilities, and continuously improve our DevSecOps practices.  You will work in a multidisciplinary environment with engineers across the globe, ensuring that security does not block innovation but rather accelerates it. .You are someone with 5+ years of experience in Security Engineering, or DevSecOps, preferably in large-scale, customer-facing platforms. You have deep expertise in automation, cloud-native security, and CI/CD. You combine technical leadership with strong communication skills, and you are comfortable working in global and multicultural teams.  You will thrive in this role if you are:  * A curious problem solver who challenges the status quo  * A collaborator who values teamwork and knowledge-sharing  * Excited by the intersection of technology, creativity and data  * Experienced in Agile methodologies and consulting (a plus)  Role responsibilities * Define and implement enterprise-wide DevSecOps standards, patterns, and guardrails.  * Design and build security automation mechanisms such as secure CI/CD pipelines with integrated SAST, DAST, SCA, IaC scanning, and container security.  * Design and Implement cloud-native security tooling and platforms.  * Lead security reviews, audits and threat modeling for high-impact platforms and projects.  * Guide teams and promote security awareness on secure coding, vulnerability remediation, and cloud security best practices, acting as a Security Subject Matter Expert.  * Automate compliance and governance requirements at scale.  * Participate in and lead security incident lifecycle, including RCA, remediation, postmortem analysis, and resilience improvements.  * Mentor and coach DevOps/DevSecOps engineers across teams.  * Advocate for and implement practices to reduce toil and scale security automation.  * Define and/or conduct regular vulnerability assessments and manage remediation efforts  * Ensure our clients' systems and applications meet regulatory and organizational security standards (e.g. NIST, ISO, SOC 2, PCI DSS, GDPR, etc.)  * Help define and implement monitoring solutions and participate in incident response and remediation as needed  * Work closely with development, ops, and security teams to ensure secure delivery of software    MUST HAVE QUALIFICATIONS To be considered for this role, you must meet the following essential qualifications:  * You have led DevSecOps initiatives in enterprise or high-traffic production environments.  * You have strong experience with cloud security (Mostly Azure).  * You are proficient in CI/CD tooling.  * You have advanced knowledge of container security and orchestration (Docker, Kubernetes, AKS).  * You have hands-on experience with security scanning tools (Snyk, SonarQube, Trivy, Aqua, Prisma, Checkov, etc.).  * You have implemented monitoring and observability solutions with a security lens (New Relic, Prometheus, Grafana, ELK).  * You are fluent in at least one scripting/programming language (Python, Go, Bash, etc.) for automation.  * You are experienced in IAM, secrets management, and zero-trust principles.  * You are a natural mentor, able to upskill and guide other engineers.    NICE TO HAVE QUALIFICATIONS   * Strong communication and presentation skills  * Accountability, collaboration, and time-management skills  * Strong desire to learn more about business every day  If you do not meet all the listed qualifications or have gaps in your experience, we still encourage you to apply. At Valtech, we recognize that talent comes in many forms, and we value diverse perspectives and a willingness to learn.  COMMITMENT TO REACHING ALL KINDS OF PEOPLE  We design experiences that work for all kinds of people - and that starts with our own teams. At Valtech, we’re intentional about building an inclusive culture where everyone feels supported to grow, thrive and achieve their goals. No matter your background, you belong here. Explore our Diversity & Inclusion site to see how we’re creating a more equitable Valtech for all.    THE BENEFITS   This is a Full time position based in Buenos Aires Beyond a competitive compensation package, we offer:  * Flexibility, with remote and hybrid work options (country-dependent)  * Career advancement, with international mobility and professional development programs  * Learning and development, with access to cutting-edge tools, training and industry experts  Our benefits are tailored to each location. Your Talent Partner will provide full details during the hiring process.     YOUR APPLICATION PROCESS Once you apply, our Talent Acquisition team will review your application. If your skills and experience align with the role, we’ll reach out for next steps. Your CV should cover key information on relevant experiences and expertise. We do not require information such as age, gender, marital status, or a headshot in your application. We review all candidates based on skills, experience, and potential. ⚠️ Beware of recruitment fraud: Only engage with official Valtech email addresses. We are committed to inclusion and accessibility. If you need reasonable accommodations during the interview process, please either indicate it in your application or let your Talent Partner know.     ABOUT VALTECH Valtech is the experience innovation company that exists to unlock a better way to experience the world. By blending crafts, categories, and cultures, we help brands unlock new value in an increasingly digital world.  At the intersection of data, AI, creativity, and technology, we drive transformation for leading organizations, including L’Oréal, Mars, Audi, P&G, Volkswagen Dolby, and more.  At Valtech, we don’t just talk about transformation. We make it happen. Our people are the heart of our success, and we foster a workplace where everyone has the support to thrive, grow and innovate.  Are you ready to create what’s next? Join us.

Sofia Stars is a fast-growing global service provider that guides high-growth businesses to success. Our range of tailored solutions includes R&D, Customer Support, Sales, KYC, Risk, and Anti-Fraud services. We make every connection shine with fresh tech and cultural understanding. We invite a DevSecOps Engineer to join our team. Responsibilities: ✔️ Develop direction, create a roadmap and improve the DevSecOps culture in the company.  ✔️ Help DevOps with secure Istio and ServiceMesh setup, Kubernetes (EKS) security setup.  ✔️ Interaction with DevOps, transfer of services for their support and training in security principles.  ✔️ Implementation of OPA and virtualisation configuration security analysers.  ✔️ Setting up CI/CD security and improving the security of solutions that use DevOps - Terraform, Ansible, etc. ✔️ Implementing Security Scanners in Pipelines.  ✔️ Automation of security processes.  Requirements: ✔️ Knowledge of the basic principles of DevOps approaches (CI /CD).  ✔️ Experience with Kubernetes or other orchestration tools.  ✔️ Experience with Ansible/Terraform/Chef configuration management systems, etc. ✔️ Experience in web server and database administration.  ✔️ Knowledge of the TCP/IP protocol stack and understanding of the OSI model.  ✔️ Understanding the principles of microservice application architecture.  ✔️ Experience with version control systems.  ✔️ Cloud experience (AWS, GCP) Security.  ✔️ Experience in infrastructure analysis for information security risks and their elimination / mitigation.  ✔️ Experience in automating management processes and access control.  ✔️ Experience in implementing Vault management systems and privileged user control systems.  ✔️ Experience with Security scanners and implementation of their pipelines.  ✔️ Understanding SSDLC (OSAMMv2) principles.  Our Excellent Benefits: * Up to 25 vacation days * 6 undocumented sick leaves * Medical insurance and dental coverage * Sport card 70% coverage (Multisport and/or CoolFit) * Food vouchers (102 EUR) * Appreciation gifts (birthday, wedding, newborn, etc.) * Office massages * Breakfast, lunch & snacks in the office * Education budget  * Monthly team events * Great office location Working Model: * This is an office-based position in Sofia, Bulgaria.   Grow fast, shine globally! By submitting your application, you agree to our Privacy Policy.