At ThetaRay, our purpose is to make the world a safer place by protecting the integrity of the global financial system.
We do this by putting AI at the core of both our technology and our way of working. Our AI-driven solutions help banks and fintech companies worldwide detect and stop serious financial crime, from human trafficking and terrorist financing to sophisticated money laundering, while advanced technology, automation, and AI-driven tools help our teams collaborate smarter, move faster, and continuously improve how we build, deliver, and innovate.
About the role:
We are looking for a DevSecOps Engineer to turn expertise, initiative, and bold thinking into real impact on the next generation of AI-driven financial crime detection.
If you combine strong security engineering and DevOps capabilities with hands-on experience in Kubernetes environments, vulnerability management, and secure CI/CD practices, and if you are motivated by strengthening the security and compliance posture of a cloud-native platform trusted by global financial institutions, ThetaRay could be your next challenge.
Responsibilities:
- Identify, analyze, prioritize, and remediate security vulnerabilities, including CVEs in containers, application dependencies, and infrastructure components.
- Work closely with engineering and DevOps teams to fix vulnerabilities across CI/CD pipelines, container images, Kubernetes workloads, and cloud infrastructure.
- Support and secure Kubernetes environments, preferably Azure Kubernetes Service (AKS), with experience in OpenShift Container Platform (OCP) considered an advantage.
- Implement and maintain security controls across cloud-native platforms, including container security, image scanning, runtime security, and Kubernetes hardening.
- Work with Static Code Analysis / SAST tools to identify code-level security risks and help development teams remediate findings.
- Work with CSPM tools to detect and resolve cloud security misconfigurations.
- Automate security, compliance, and operational tasks using Bash and other scripting tools.
- Support secure software delivery processes, including CI/CD security gates, vulnerability scans, policy enforcement, and compliance checks.
- Collaborate with global teams across different time zones to support security initiatives, incident response, and platform improvements.
- Promote DevSecOps best practices and help embed security into the software development lifecycle.
- Proven experience as a DevSecOps Engineer, DevOps Engineer with a security focus, or Cloud Security Engineer.
- Hands-on experience handling CVEs, vulnerability remediation, patching, and dependency upgrades.
- Hands-on experience with risk prioritization for security vulnerabilities.
- Strong experience with Kubernetes, preferably AKS (Azure Kubernetes Service).
- Strong hands-on experience with Linux systems, including troubleshooting, hardening, and package management.
- Hands-on experience with Linux permissions, services, networking, and logs.
- Solid experience writing and maintaining Bash scripts.
- Experience with static code analysis tools such as SonarQube, Checkmarx, Veracode, Snyk Code, or Semgrep.
- Experience with CSPM (Cloud Security Posture Management) tools such as Prisma Cloud, Wiz, Microsoft Defender for Cloud, Orca, or Lacework.
- Familiarity with container security tools and practices, including image scanning, base image management, secrets handling, and Kubernetes security policies.
- Fluent English (written and verbal).
Advantages:
- Experience with OCP / OpenShift (Advantage).
- Experience in financial services, fintech, AML, compliance, or regulated SaaS environments (Advantage).
- Familiarity with security standards and frameworks such as CIS Benchmarks, OWASP, NIST, or ISO (Advantage).
- Experience with Infrastructure as Code tools such as Terraform, Helm, Helmfile, Kustomize, or ArgoCD (Advantage).
- Knowledge of SIEM, audit logging, and security monitoring platforms (Advantage).
#LI-SB2
Skills Required
- Proven experience as a DevSecOps Engineer, DevOps Engineer with security focus, or Cloud Security Engineer
- Hands-on experience handling CVEs, vulnerability remediation, patching, dependency upgrades, and risk prioritization
- Strong experience with Kubernetes
- Experience with Azure Kubernetes Service (AKS)
- Experience with OpenShift Container Platform (OCP)
- Strong hands-on experience with Linux systems (troubleshooting, hardening, package management, networking, logs)
- Solid experience writing and maintaining Bash scripts
- Experience with Static Code Analysis / SAST tools (e.g., SonarQube, Checkmarx, Veracode, Snyk Code, Semgrep)
- Experience with CSPM tools (e.g., Prisma Cloud, Wiz, Microsoft Defender for Cloud, Orca, Lacework)
- Familiarity with container security tools and practices (image scanning, base image management, secrets handling, Kubernetes security policies)
What We Do
At ThetaRay, we believe that banks no longer have to de-risk when they can expand their cross-border ecosystem safely. ThetaRay is the developer of SONAR, a groundbreaking, AI-powered, transaction-monitoring SaaS solution for cross-border payments that allows banks to expand their business opportunities by achieving safe and reliable cross-border payment monitorisation. ThetaRay's technology is the only packaged SaaS offering that analyzes SWIFT traffic, risk indicators, and client/payer/payee data to detect anomalies indicating money laundering activity across complex, cross-border transaction paths. It is also one of the only AI-driven AML solutions that can be easily integrated and deployed within days, with minimal implementation required. ThetaRay's solution increases detection capabilities for both supervised and unsupervised data and includes profiling and advanced analytics assessments, all in one platform. Financial organizations that rely on highly heterogeneous and complex ecosystems benefit greatly from ThetaRay's unmatchable low false-positive rates.
