DevSecOps Engineer.

Who we are:

Adaptiq is a technology hub specializing in building, scaling, and supporting R&D teams for high-end, fast-growing product companies in a wide range of industries.

About the Product:

Elementor is the leading website building platform for WordPress professionals, that empowers developers, designers, and marketers, with the ability to create their futures one pixel at a time.

A new website is created every 10 seconds using Elementor! Since Elementor launched in 2016, it has expanded to more than 150 countries, with more than 16M websites powered by Elementor. More than 10% of all websites around the world are built using Elementor!

About The Role:

We’re looking for an experienced DevSecOps Engineer to join our team and verify that our cloud environments and CI/CD flows are secured according to best practices.

As a SecDevOps Engineer, you’ll lead Elementor’s security efforts around our dynamic and fast-paced production environments. You’ll define and create operation tools and processes, and play a hands-on role in directly impacting work across all R&D flows.

Key Responsibilities:

• Secure and monitor live production environments;
• Perform security drill-downs and investigations;
• Act as a subject matter expert and manage security incidents across all organizational environments;
• Implement monitoring and alerting procedures and mechanisms;
• Design and implement automation processes for security monitoring and incident response-related flows;
• Design, implement, and develop security solutions according to R&D/production needs;
• Identify new security threats, and trends by conducting continuous monitoring, vulnerability assessments, and log analyses;
• Conduct regular internal and external security assessments, vulnerability scans, and penetration testing of systems and applications to identify and remediate security weaknesses and threats;
• Manage Elementor’s bug bounty program;
• Generate regular reports on security metrics, compliance, and incident response activities for management and stakeholders.

Required Competence and Skills:

• 3+ years of hands-on DevOps experience in a cloud environment;
• At least 2 years of experience with Kubernetes, containers, and serverless security;
• 1+ years of relevant industry experience in security, with a solid knowledge of information security principles and practices;
• Experience integrating security into CI/CD pipelines;
• Experience with any of such cloud vendors as GCP/AWS/Azure;
• In-depth understanding and proven experience in security monitoring and analytics;
• AppSec – Knowledge of SSDLC best practices around application security;
• Strong understanding of cybersecurity and network principles.

Advantages:

• Solid understanding of security/operations infrastructure;
• Experience with large-scale cloud infrastructures and services;
• Experience leading integration processes for SIEM systems;
• Experience with incident response (IR) attacks and mitigation methods;
• Experience building tools and processes using Python or Go to address security-related needs.

Why Us?

We utilize a remote working model, providing a powerful workstation and co-working space of your choice in case you need it;

We offer a highly competitive package;

We provide 20 days of vacation leave per calendar year (plus official national holidays of a country you are based in);

We prioritize the professional growth and well-being of our team members. Hence, we organize various social events throughout the year to foster connections and promote wellness.