DevSecOps Engineer

Mediawave is evolving from a digital agency into a player in AI, sustainability, and political analytics — which means our infrastructure needs to be resilient, secure, and scalable. We're looking for a mid-level DevSecOps Engineer who can bridge development speed with system security, ensuring every release ships smoothly without compromising client data integrity.

You'll work across divisions (IT, Digital Analyst, Business Development) to build and maintain pipelines that are both efficient and secure, while holding full ownership of cloud security configuration and system monitoring. This isn't a role that just “keeps the servers running” — you'll be the gatekeeper between fast-moving innovation and risk governance.

Key Responsibilities

Your primary responsibility is keeping Mediawave's infrastructure and data secure across every layer. You'll configure and maintain security posture across our cloud environments (AWS and GKE), run vulnerability assessments and security hardening, and ensure system configurations align with data security standards — especially since some client data passes through third-party tools and AI platforms. You'll also build and monitor our observability and security stack (logging, metrics, alerting, threat detection using tools like Wazuh) on an ongoing basis, and respond to security incidents (supported by SOAR workflows where applicable).

On top of that security foundation, you'll design, build, and maintain CI/CD pipelines to speed up the development cycle while embedding security controls at every stage (shift-left security). You'll manage multi-platform cloud infrastructure, automate through Infrastructure as Code, write technical documentation, and collaborate with the development team to build a security culture that's built-in, not bolted on.

Qualifications

Technical — Operations & Infrastructure

• 3–5 years of experience in DevOps, SRE, or security engineering

• Proficient with CI/CD tools (GitLab CI, Jenkins, or GitHub Actions)

• Solid understanding of containerization and orchestration (Docker, Kubernetes)

• Hands-on experience managing cloud infrastructure on AWS and GKE (Google Kubernetes Engine)

• Strong grasp of Infrastructure as Code (Terraform, Ansible)

• Scripting skills (Python, Bash, or Go)

Technical — Security & Monitoring

• Experience with cloud security setup and configuration (IAM, network security, secure-by-design) on AWS and GKE

• Understanding of vulnerability management and security scanning practices (SAST/DAST)

• Familiar with WAF/edge security such as Google Cloud Armor or AWS WAF for protection against DDoS and application-layer attacks

• Experience with SIEM/threat detection tools such as Wazuh for log analysis and intrusion detection

• Familiar with SOAR (Security Orchestration, Automation, and Response) concepts for automating security incident response

• Experience building and managing monitoring systems for infrastructure health and security (Prometheus, Grafana, ELK Stack, or cloud-native monitoring like CloudWatch/Cloud Monitoring)

Soft Skills

• Independent, problem-solving mindset

• Strong communicator, able to collaborate across teams

• Comfortable working in a fast-paced environment

Nice to Have

Relevant certifications (such as AWS Certified, CKA, or a security certification), experience with compliance frameworks, hands-on experience with SOAR platforms, and an understanding of data security in the context of AI/third-party tool integrations will make your application stand out.