Senior DevSecOps Engineer
Employer · Zocks
Cybersecurity specialistSystem administratorNetwork engineerFlexibleFull-timeMealsBudapest District XI
Zocks is an AI platform transforming how financial advisors work. Our entire R&D organization is based in Budapest, where our teams are directly responsible for shaping the product and technology. We are looking for a Senior DevSecOps Engineer to help mature our security posture, handle compliance readiness, and manage infrastructure.
Tasks
- Owning the full cloud infrastructure lifecycle across multi-region environments
- Owning and hardening the security perimeter across cloud and network boundaries
- Triaging and remediating findings from penetration tests and vulnerability scans in collaboration with external security partners
- Creating and maintaining our delivery pipeline from developer machines to production, including automated security checkpoints, secrets scanning, and dependency auditing
- Supporting compliance initiatives (e.g. SOC 2, ISO 27001, NIST) through infrastructure controls, audit logging, and evidence collection
- Optimizing network topology for the best possible connectivity, latency and throughput for end users
Conditions & benefits
Premium Health InsuranceSZÉP-cardL&D contributionAYCM packageEmployee equity programExtra PTOHome office supportYour lunch is on us when you are in the officeFully stacked office snacks
Requirements
- 6 years relevant experience (DevOps/Security)
- Deep understanding of AWS security services (IAM, Security Hub, GuardDuty, SCPs, network ACLs)
- Strong knowledge of cloud security best practices
- Experience with network security (VPNs, firewalls, zero-trust architecture, ingress/egress protection)
- Linux hardening experience
- Experience with secrets management (Vault, AWS Secrets Manager)
- Knowledge of PKI / certificate lifecycle management
- Experience with compliance and audit requirements (SOC2, ISO27001, CIS Benchmarks)
- Ability to understand penetration testing findings and coordinate remediation efforts
- Experience with security incident response and risk prioritization
- Fluent English and Hungarian language knowledge