Senior DevSecOps Specialist
Tangem is a hardware wallet company that lets users store, buy, swap, stake, and spend crypto using NFC-enabled card and ring-shaped devices.
Funding history
About Tangem
Tangem builds hardware wallets for users who want to self-custody digital assets without relying on exchanges or custodians. Users can store, send, receive, swap, stake, and spend crypto across multiple blockchain networks using NFC-enabled card or ring-shaped devices paired with a companion mobile app. The wallets use a secure element chip, require no batteries or cables, and offer a seedless backup system using multiple physical cards.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will integrate security throughout the software development lifecycle, partnering with development and DevOps teams. You will build AI-assisted code review and automated security testing, protect CI/CD pipelines and the software supply chain, investigate findings, and implement practical security improvements.
Requirements
- 5+ years of practical DevSecOps, DevOps, or similar technical security experience
- Hands-on experience with GitHub, GitHub Actions, and CI/CD security
- Experience implementing AI-powered security code review in pull request, CI/CD, and automated verification workflows
- Experience implementing SAST, SCA, and secrets scanning solutions
- Experience establishing secure code review workflows, branch protection policies, and automated security checks
- Understanding of secure software development, application vulnerabilities, and software supply chain risks
- Security automation and scripting experience with Python, Bash, or similar languages
- Understanding of cloud infrastructure security fundamentals, including AWS IAM, access management, and secrets management
- Ability to independently implement security improvements and troubleshoot technical issues
- Communication and collaboration skills for working with development teams
- Experience with Cloudflare security products, Kubernetes, Docker, AWS, Terraform, Infrastructure as Code security scanning, mobile application security, DAST, SBOM generation, artifact signing, supply chain security frameworks, custom AI security agents, evaluation frameworks, automated vulnerability triage, or security-sensitive industries
Responsibilities
- Design, implement, and improve security controls across CI/CD pipelines and GitHub repositories
- Lead AI-powered security code review implementation and improvement across pull requests, CI/CD pipelines, and development workflows
- Establish secure code review practices, including branch protection, approval rules, CODEOWNERS, and critical-change reviews
- Implement and maintain automated security testing, including SAST, SCA, and secrets scanning
- Integrate AI-assisted verification with traditional security scanning tools
- Configure and optimize security quality gates
- Strengthen software supply chain security for dependencies, CI/CD permissions, builds, and artifact integrity
- Identify workflow security weaknesses and implement preventive controls
- Develop scripts, integrations, and automation tools to reduce manual security work
- Investigate security findings, prioritize remediation, and improve secure coding practices with development teams
- Support Cloudflare security-service configuration and improvement when required
- Contribute to security engineering and infrastructure security automation initiatives
Benefits
- Remote work from anywhere in the world
- Unlimited vacation
- Birthday presents
- Compensation for necessary technical devices
- Paid sick leave
