DevSecOps Engineer

About the Position

We're seeking a DevSecOps Engineer to join our team in Kyiv, Ukraine, focusing on product security and compliance with ISO/IEC 27001:2022.

Responsibilities

• Assess the security of new implementations and developments at all levels: network (ports, access rules), infrastructure (database protection, server authorization), application (security headers, protection against prompt injection, SQL injection). Issue official approval before launching functionality or a new tool.
• Research specific risks of working with AI systems. Translate results into corporate processes and frameworks based on ISO 27001:2022.
• Participate in the organization of the implementation of the 27001:2022 standard in the company.
• Participate in general information security tasks within the scope of DevSecOps competencies.
• Audit network perimeters, NGFW rules, network segmentation. Check server, container (Docker), and cloud service (AWS/Google/Azure) configurations. Knowledge of the least privilege principles.

Requirements

• Practical experience in ensuring web security at the architecture and implementation levels: deep understanding and application of OWASP Top 10, working with security headers, WAF, and building API protection approaches. Experience using SAST/DAST tools in real projects, understanding the DevSecOps pipeline with security integration in CI/CD and implementing security gates.
• Understanding of current attack vectors on LLM and AI systems (prompt injection, jailbreak, data leakage, model inversion) at a practical level; experience or confident knowledge of OWASP LLM Top 10.
• Practical experience within ISO/IEC 27001:2022 (participation in implementation, support, or audits), ability to independently develop security policies and procedures.
• Ability to translate complex security requirements into an understandable form for business and non-technical teams. Experience working at the intersection of various departments with different priorities and the ability to find a balance between security and business needs.
• High level of independence in researching new technological risks, a proactive approach with a focus on solutions (not just identifying problems but also their practical closure), experience in participating in audits and providing reasonable recommendations that can be implemented.

We Offer

• Official employment;
• Vacation - 24 calendar days per year + 1 day off for a birthday;
• Medical insurance after successful completion of the probationary period;
• Opportunity to create new, experiment, and solve complex problems;
• Professional growth and continuous skill improvement;
• Team of like-minded individuals and innovators;
• Reservation for military service obligations if current military registration documents are available;
• Comfortable office on the right bank of Kyiv.

About the Company

Ми - Everstar. Перше рекрутингове агентство, що допомагає milltech компаніям знаходити талановитих людей та спільно наближати перемогу.

Ми шукаємо DevSecOps Engineer у команду компанії, яка створює продукти для Сил оборони України. Це роль для спеціаліста, який буде відповідати за безпеку продукту: перевіряти рішення та допомагати впроваджувати безпечні підходи в розробці. Позиція на стику engineering, AI та compliance - з реальним впливом на те, що потрапляє в продакшн.