DevSecOps Engineer

Sumsub is the first AI-powered trust infrastructure for compliance operations at scale. It connects identity and business verification, fraud prevention, transaction monitoring, and risk workflows, helping teams reduce manual work and enter new markets.
Trusted by over 4,000 clients across financial services, crypto, mobility, trading, marketplaces, education, and iGaming, including Bybit, Bitpanda, Wirex, Avis, Vodafone, Duolingo, Kaizen Gaming, and Bancaribe.
Sumsub is recognized as a Great Place To Work® in the US and rated 4.3 out of 5 on Glassdoor. Our 1,000+ people around the world back it up, too: 92% are proud to be Sumsubers, and 90% say their work is interesting and challenging.

Now we are looking for a Senior DevSecOps Engineer (Vulnerability & Fleet Management) to design, build, and operate security controls as reliable, automated internal services across our cloud and infrastructure. This role is an exciting opportunity to take full engineering ownership of our Vulnerability Management and Fleet Security capabilities, shifting security from manual gatekeeping to a scalable, self-service platform.

What You Will Be Doing:

• Own Vulnerability Management End-to-End: Design and operate scanning pipelines across infrastructure and containers (Nessus, Trivy or equivalent), managing CVE correlation, asset ownership mapping, and remediation SLAs.

• Manage Infrastructure Fleet Security: Oversee fleet inventory, policy coverage, and configuration drift using tools like osquery or FleetDM-class solutions.

• Build Smart Noise Reduction & Automation: Develop correlation logic linking vulnerabilities to business criticality and exploitability (CVSS/EPSS), and automate lifecycle operations (onboarding, asset reconciliation, exception workflows).

• Deliver Self-Service Security Products: Build APIs, dashboards, and ChatOps/Slack integrations that allow platform and engineering teams to consume security controls independently.

• Codify Security Standards: Define machine-checkable security standards and ensure audit-ready compliance evidence is produced automatically as a byproduct of system operations.

• Collaborate for Operational Resilience: Partner directly with SOC, Infrastructure, and Platform teams to validate controls in production while protecting developer experience.

About You:

• Senior Platform Mindset: You think like a Platform Engineer building tools for internal customers, prioritizing developer experience and automated prevention over manual queue clearing.

• Tooling & Program Ownership: Hands-on experience running program-level infrastructure scanning (Nessus, Qualys, Tenable) and container image security (Trivy or similar).

• Fleet & Cloud Infrastructure: Proven experience with fleet inventory systems (osquery, FleetDM) alongside cloud platforms (AWS preferred) and containerized/Kubernetes environments.

• Automation & Engineering Fundamentals: Strong scripting ability in Python, Go, or Bash, with solid experience building custom APIs, dashboards, or system integrations.

• Vulnerability & Risk Judgment: Deep understanding of CVEs, CVSS/EPSS scoring, and remediation workflows—with the practical judgment to know when theoretical frameworks don't match production reality.

Nice to have:

• Experience integrating security gates into modern CI/CD pipelines (GitLab CI, GitHub Actions).

• Exposure to Kubernetes admission control and Policy-as-Code frameworks (Kyverno, OPA).

• Background in automating compliance evidence collection for standards like PCI DSS, SOC 2, or ISO 27001.

• Proven track record of evolving a security function from manual reviews toward platform ownership.

What We Offer:

• Remote-first, trust-based culture. Work from the place that works best for you. No mandatory office days, no attendance trackers. In some locations, we provide offices or coworking spaces, but the choice is yours.

• True flexibility. We do not fix you to a 9-to-5 schedule. You can adjust your working hours when needed, as long as your day stays productive and in sync with the team.

• Extra time off. Your birthday is a holiday here. Add to that 10 personal days each year, seven sick days without paperwork, and extra time to enjoy Christmas and New Year. Time to rest is part of the deal.

• Work that matters. Our mission is to build a digital world that is secure, accessible and inclusive for everyone. From fighting fraud to making online services easier and safer to use, your work will have a real impact on how people experience trust online.

• Compensation. We offer fair and transparent pay, benchmarked to the market.

• Truly global. We work across continents and time zones, with teammates and customers from all over the world. You will run campaigns that cross borders, cultures, and languages, and see your ideas land worldwide.

• Growth built in. Clear goals, open feedback and personal development plans. We support your progress with learning opportunities and by covering role-specific events, from design conferences to marketing forums.

• Celebrating your big moments. We are proud to support you through life’s biggest journeys with dedicated financial bonuses for both marriage and welcoming a new baby to your family.

• Team offsites. Sometimes just Slack is not enough. That is why we meet in person a few times a year. Trips are fully covered, so you can meet, collaborate, and recharge together.

• Getting you set up. We make sure you have access to the tools and hardware you need to do your work well.

• Friendly by design. Our logo is a dog for a reason. We keep things human, open and kind. We welcome individuality, quirks and different perspectives, because that is what makes our work smarter and more fun.

The hiring stages: TA screening -> Hiring Manager Interview -> Final Interview.

Sounds like a great opportunity for your career development? Then go ahead and apply!
We are a global community of innovators, creators, and thinkers, and we believe that diversity fuels our innovation. Sumsub is proud to be an equal opportunity employer, committed to building a diverse and inclusive workforce. We welcome applications from people of all backgrounds, cultures, genders, experiences, abilities and perspectives. Join us in shaping the future inclusively.

We believe in fair and transparent compensation. Salaries vary depending on work location and applicable local market conditions.

We believe in fair and transparent compensation. Salaries vary depending on work location and applicable local market conditions.
This role is open to candidates in multiple countries, and compensation differs based on the candidate’s confirmed work location. For this reason, a single universal salary range is not included in this job posting.
The applicable work location will be confirmed early in the recruitment process, and the relevant compensation information for that location will be shared in writing, in line with local requirements.