🌍 Location: Remote/Malta (depending on candidate)
Contract: Full-time
Level: Senior / Strong Mid-Senior
About the Role
We are looking for an experienced Cloud Security & DevSecOps Engineer to strengthen the security of our AWS infrastructure and applications within a growing B2B iGaming technology environment.
This is a hands-on technical role for someone who can identify vulnerabilities, implement security controls, automate processes and improve infrastructure resilience. The focus is on building a proactive security framework and embedding security throughout development and deployment operations.
Key Responsibilities
- Assess and secure AWS environments, including IAM, VPC, EC2, ECS, Fargate, RDS and S3.
- Identify and remediate vulnerabilities, misconfigurations and potential security risks.
- Implement AWS security services such as GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.
- Strengthen access controls, encryption, secrets management and network security.
- Introduce automated vulnerability scanning, threat detection and security monitoring.
- Integrate security checks into CI/CD pipelines, including code, dependency, secrets and container scanning.
- Secure Docker containers, cloud workloads, APIs and deployment environments.
- Improve infrastructure hardening, patch management, backups and disaster recovery security.
- Develop incident response procedures, security alerts and remediation processes.
- Maintain security policies and support audits and compliance requirements.
Requirements
- 4+ years of experience in Cloud Security, DevSecOps or Infrastructure Security.
- Strong hands-on AWS security experience and knowledge of IAM, VPC, encryption and cloud architecture.
- Experience securing Linux servers, Docker containers, EC2, ECS and Fargate.
- Practical experience implementing security automation within CI/CD pipelines.
- Knowledge of vulnerability management, threat detection and incident response.
- Experience with Terraform or other Infrastructure as Code tools.
- Python, Bash or similar scripting skills.
- Good understanding of web and API security, including OWASP Top 10.
- Ability to independently assess risks and implement practical security solutions.
Nice to Have
- AWS Security Specialty certification or equivalent.
- Experience in iGaming, FinTech, Payments or other high-traffic transactional environments.
- Knowledge of ISO 27001, SOC 2 or PCI DSS.
- Experience with Kubernetes, SIEM platforms and security monitoring tools.
- Familiarity with penetration testing and security assessment methodologies.
First 90 Days
- First 30 days: Assess AWS infrastructure, identify security gaps and deliver a prioritised remediation plan.
- Days 31–60: Address critical vulnerabilities, strengthen access controls and introduce security automation.
- Days 61–90: Establish continuous monitoring, improve incident response and deliver a longer-term security roadmap.
What We're Looking For
A proactive, hands-on engineer who can take ownership of cloud security improvements from assessment through implementation. This is not a purely advisory or compliance-focused role; we need someone capable of designing solutions, implementing controls, automating security processes and continuously improving infrastructure protection.
Originally posted on Himalayas
