Senior DevSecOps Engineer

• AWS Inspector
• Cloud Security Posture Management (CSPM) findings
• SOC 2 control assessments
• Perform security hardening across cloud environments and patch management, prioritizing Critical and High severity vulnerabilities (CVEs).
• Conduct regular reviews of AWS environments using the AWS Well-Architected Framework and recommend improvements for: Security Reliability Performance Scalability Cost optimization Operational excellence
• Security
• Reliability
• Performance
• Scalability
• Cost optimization
• Operational excellence
• Administer AWS networking and infrastructure security, including: VPCs, Security Groups, Network ACLs, Firewalls
• Implement and maintain AWS Control Tower and governance best practices.
• Utilize AWS Trusted Advisor to improve security, performance, and cost efficiency.
• Continuously identify and remove unused or legacy cloud resources.

• Develop and maintain Infrastructure as Code (IaC) using Terraform and/or AWS CloudFormation.
• Automate cloud infrastructure deployment and operational processes.
• Improve infrastructure consistency, scalability, and operational efficiency.
• Design and maintain backup and disaster recovery strategies.
• Conduct periodic Disaster Recovery (DR) testing and validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
• Support capacity planning and infrastructure optimization.

• Implement continuous monitoring across AWS environments.
• Monitor logs, metrics, and alerts for suspicious activity.
• Investigate and respond to security incidents.
• Collaborate with Security teams to perform root cause analysis and implement preventative controls.
• Improve cloud detection and response capabilities.

• Secure CI/CD pipelines in accordance with Secure Pipeline Verification Standard (SPVS) and OWASP Secure Pipeline Verification guidance.
• Remediate vulnerabilities findings identified through: CI/CD security assessments and penetration testing GitHub Advanced Security SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) Software Composition Analysis (SCA)
• CI/CD security assessments and penetration testing

• Implement and maintain API security testing solutions such as OWASP ZAP.
• Collaborate with development teams to embed security throughout the Software Development Lifecycle (SDLC).

• Maintain and support MongoDB environments.
• Manage database access, permissions, authentication, and credential lifecycle.
• Perform periodic access reviews and credential rotation.
• Enhance MongoDB monitoring and auditing and monitoring audit logs for suspicious or unauthorized activities
• Support database performance tuning, availability, backup, and recovery.

• Enhance monitoring, logging, and alerting across cloud infrastructure.
• Improve platform observability using Datadog, CloudWatch, or equivalent solutions.
• Develop operational dashboards and proactive alerting.
• Reduce operational risk through continuous monitoring.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 5 years of experience in Cloud Infrastructure, DevSecOps, Site Reliability Engineering (SRE), DevSecOps, or a related role.
• One or more AWS certifications preferred: AWS Certified Solutions Architect – Associate/Professional AWS Certified Security – Specialty AWS Certified DevOps Engineer – Professional
• AWS Certified Solutions Architect – Associate/Professional
• AWS Certified Security – Specialty
• AWS Certified DevOps Engineer – Professional
• Strong hands-on experience with AWS cloud services, infrastructure, security architecture, and AWS security services.
• Experience implementing Infrastructure as Code using Terraform and/or AWS CloudFormation.
• Experience managing CI/CD pipelines and integrating security into software delivery processes.
• Experience with vulnerability management, cloud security tooling, and remediation.
• Experience with monitoring and observability tools such as Datadog or CloudWatch.
• Experience administering MongoDB in production environments
• Familiarity with Python, JavaScript/TypeScript, and modern web frameworks such as React.js is an asset.
• Experience supporting backup, disaster recovery, and business continuity planning.
• Strong organizational skills and ability to work towards tight deadlines
• Strong written and verbal communication skills and effective problem-solving

A t Fintel Connect, we are committed to fostering a diverse and inclusive workplace as an equal opportunity employer.

We embrace individuals of all backgrounds, ensuring that everyone has the opportunity to thrive and succeed.

We believe that humans are an important and vital part of the recruitment process.

W e do not use AI in any part of our recruitment process .

While we can’t guarantee an interview, we do commit to review your application in full.

Join us and be part of a team shaping the future of growth in the financial sector.

For more about us, visit our website: Fintel Connect