The Role
Design, build, and maintain secure CI/CD pipelines and automation for application security (SAST/DAST/IAST). Secure IaC, evaluate and manage security tooling, mentor engineers on secure coding and DevSecOps practices, and implement vulnerability management and compliance automation.
Summary Generated by Built In
We’re looking for a Senior DevSecOps Engineer to help us take our security work further through automation across SOC and DevSecOps processes.
You’ll join AppSec Cheetahs, our team of ethical hackers. We look for vulnerabilities, strengthen application security, and share our knowledge with other engineers.
In this role, you’ll build and improve security solutions, develop automation with Python, create and maintain CI/CD pipelines, and explore AI integrations to make security processes more efficient.
It’s a great opportunity to combine your DevOps and Python expertise with Application Security, work on real security challenges, and have a direct impact on the security of our products.
Key Responsibilities
- Integrate Security into CI/CD: Design, build, and maintain a secure CI/CD pipeline by integrating static (SAST), dynamic (DAST), and interactive (IAST) application security testing tools.
- Automation: Develop and implement automation for security processes, vulnerability management, and compliance checks to ensure continuous security feedback.
- Infrastructure as Code (IaC) Security: Secure IaC scripts (e.g., Terraform, CloudFormation) by scanning for misconfigurations and vulnerabilities before deployment.
- Tooling & Maintenance: Evaluate, implement, and manage security tools for vulnerability scanning, monitoring, and compliance.
- Mentorship & Advocacy: Act as a security champion within the organization.
- Mentor developers and operations teams on secure coding practices and DevSecOps principles.
Skills, Knowledge and Expertise
- Experience: 5+ years of experience in a DevOps, Security Engineering, or a similar role, with at least 2 years focused specifically on DevSecOps.
- CI/CD Expertise: Proven experience with CI/CD tools such as Jenkins, GitLab CI, any else.
- Scripting Proficiency: Strong scripting skills in languages like Python, Bash, or Go for automation tasks.
- Cloud Platform Knowledge: Knowledge of at least one major cloud provider (AWS, Azure, or GCP) and its security services (e.g., AWS Security Hub, Azure Security Center, GCP Security Command Center).
- IaC Skills: Experience with Infrastructure as Code tools like Terraform, Ansible, or CloudFormation. Container Security: Strong understanding of containerization technologies (Docker, Kubernetes) and their security challenges, including securing container images and runtime environments.
- Security Tools: Familiarity with a wide range of security tools, such as SAST (e.g., SonarQube, Checkmarx), DAST (e.g., OWASP ZAP, Burp Suite), and vulnerability scanners (e.g., Trivy, Nessus).
- Soft Skills: Problem solving abilities, strong communication skills, and the ability to work collaboratively across different teams.
Why join us
- Help us challenge injustice by creating fair choices for millions of people across 47 countries.
- Develop your professional skills with access to mentoring, career consulting, and learning programs.
- Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
- Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
- Work alongside people who take initiative, speak openly, and challenge themselves to grow.
- Improve your language skills through co-financed courses and internal speaking clubs.
- Annual salary from 70 700 EUR gross.
Final benefits may vary depending on the location.
About
inDrive is a global tech company on a mission to challenge injustice through fair choices. We started in 2012 in the coldest city on Earth, when a group of friends created a way for people to agree on fair ride prices. That idea grew into one of the world’s top ride-hailing apps, now with 400M installs across 47 countries.Today, we offer more than rides: from freight and delivery to intercity travel and financial services, all designed to put people first. We are committed to having a positive impact on people’s lives both through our core business, which supports local communities via a fair pricing model; and through the work of our impact programs. Ready to ignite your inner drive?
Skills Required
- 5+ years experience in DevOps, Security Engineering, or similar with at least 2 years focused on DevSecOps
- Proven experience with CI/CD tools (e.g., Jenkins, GitLab CI)
- Strong scripting skills (Python, Bash, or Go) for automation
- Knowledge of at least one major cloud provider (AWS, Azure, or GCP) and their security services
- Experience with Infrastructure as Code tools (Terraform, Ansible, CloudFormation)
- Experience securing container platforms and images (Docker, Kubernetes)
- Familiarity with SAST tools (e.g., SonarQube, Checkmarx) and DAST tools (e.g., OWASP ZAP, Burp Suite)
- Familiarity with vulnerability scanners (e.g., Trivy, Nessus) and IAST tooling
- Ability to mentor teams and act as a security champion with strong communication skills
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
inDrive is a global IT and transportation platform inDrive is one of the world’s fastest growing online ride-hailing services. Its services are available in over 749 cities in 46 countries throughout the world. The Company’s app has been downloaded over 150 million times. inDrive offers other services, including intercity transportation, freight and cargo services, as well as delivery services in different markets of operations. inDrive is based in Mountain View, California, and operates regional hubs in the Americas, Asia, the Middle East, Africa and the countries of the CIS, and employs over 2,000 people. In early 2021, inDrive achieved unicorn status after closing a $140m investment round with Insight Partners, General Catalyst, and Bond Capital, which valued the company at $1.23 billion.
