Senior DevSecOps Engineer
Vivid Money Group is a European fintech offering personal and business financial services through digital accounts. Its services include payments, cards, cashback, interest accounts, international transfers, bookkeeping tools, investments, and cryptocurrency services.
About Vivid Money Group
Vivid Money Group operates a digital financial platform for individuals, freelancers, SMEs, enterprises, and other organizations across Europe. It provides business and personal accounts, IBANs, Visa cards, cashback, SEPA and SWIFT transfers, international payments, online payment acceptance, invoicing, bookkeeping integrations, tax filing, business travel, team spending controls, and AI-powered digital employees. The group also offers interest accounts, managed model portfolios, brokerage services for stocks, ETFs, iBonds, money market funds, and crypto-assets, as well as Crypto Earn services through regulated Vivid entities in Luxembourg and the Netherlands.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will strengthen security across AWS, Kubernetes, infrastructure, applications, and AI systems. You will embed automated controls into development workflows, conduct security reviews, manage vulnerabilities, secure AI infrastructure, and mitigate AI-specific risks.
Requirements
- 5+ years of hands-on experience in DevSecOps, cloud security, or related fields.
- Hands-on experience operating AWS and Kubernetes in production environments.
- Experience implementing security in Infrastructure as Code and CI/CD workflows.
- Understanding of access control, secrets management, network security, and encryption.
- Familiarity with container security and application security risks.
- Understanding of AI and LLM security risks and experience securing AI infrastructure components.
- Scripting experience and familiarity with Git-based development environments.
- Communication skills in English.
Responsibilities
- Improve the security of AWS and Kubernetes platforms.
- Strengthen IAM, RBAC, encryption, secrets management, and network controls through policy-as-code.
- Manage edge security, traffic filtering, WAF configuration, and external exposure.
- Perform security reviews of services, architectural changes, and platform components.
- Embed automated security controls into the SDLC and CI/CD workflows.
- Lead vulnerability detection, assessment, prioritization, and reporting.
- Integrate automation and AI-assisted tooling into security reviews.
- Define and implement security controls for AI infrastructure components.
- Identify and mitigate prompt injection, data leakage, model abuse, and agent privilege-escalation risks.
Benefits
- Hybrid work from the Limassol or Almaty office, or fully remote work outside office locations.
- Relocation support to Cyprus, including visa and package.
- Learning and development budget.
- Fully paid vacation and sick leave.
- Sports compensation.