Cloud Security and DevSecOps Engineer

🌍 Location: Remote/Malta (depending on candidate)
Contract: Full-time
Level: Senior / Strong Mid-Senior

About the Role

We are looking for an experienced Cloud Security & DevSecOps Engineer to strengthen the security of our AWS infrastructure and applications within a growing B2B iGaming technology environment.

This is a hands-on technical role for someone who can identify vulnerabilities, implement security controls, automate processes and improve infrastructure resilience. The focus is on building a proactive security framework and embedding security throughout development and deployment operations.

Key Responsibilities

• Assess and secure AWS environments, including IAM, VPC, EC2, ECS, Fargate, RDS and S3.

• Identify and remediate vulnerabilities, misconfigurations and potential security risks.

• Implement AWS security services such as GuardDuty, Security Hub, Inspector, CloudTrail, WAF and KMS.

• Strengthen access controls, encryption, secrets management and network security.

• Introduce automated vulnerability scanning, threat detection and security monitoring.

• Integrate security checks into CI/CD pipelines, including code, dependency, secrets and container scanning.

• Secure Docker containers, cloud workloads, APIs and deployment environments.

• Improve infrastructure hardening, patch management, backups and disaster recovery security.

• Develop incident response procedures, security alerts and remediation processes.

• Maintain security policies and support audits and compliance requirements.

Requirements

• 4+ years of experience in Cloud Security, DevSecOps or Infrastructure Security.

• Strong hands-on AWS security experience and knowledge of IAM, VPC, encryption and cloud architecture.

• Experience securing Linux servers, Docker containers, EC2, ECS and Fargate.

• Practical experience implementing security automation within CI/CD pipelines.

• Knowledge of vulnerability management, threat detection and incident response.

• Experience with Terraform or other Infrastructure as Code tools.

• Python, Bash or similar scripting skills.

• Good understanding of web and API security, including OWASP Top 10.

• Ability to independently assess risks and implement practical security solutions.

Nice to Have

• AWS Security Specialty certification or equivalent.

• Experience in iGaming, FinTech, Payments or other high-traffic transactional environments.

• Knowledge of ISO 27001, SOC 2 or PCI DSS.

• Experience with Kubernetes, SIEM platforms and security monitoring tools.

• Familiarity with penetration testing and security assessment methodologies.

First 90 Days

• First 30 days: Assess AWS infrastructure, identify security gaps and deliver a prioritised remediation plan.

• Days 31–60: Address critical vulnerabilities, strengthen access controls and introduce security automation.

• Days 61–90: Establish continuous monitoring, improve incident response and deliver a longer-term security roadmap.

What Were Looking For

A proactive, hands-on engineer who can take ownership of cloud security improvements from assessment through implementation. This is not a purely advisory or compliance-focused role; we need someone capable of designing solutions, implementing controls, automating security processes and continuously improving infrastructure protection.