Cloud Security & DevSecOps Engineer
Listed on 2026-10-26
-
IT/Tech
Cybersecurity, Cloud Computing: Infrastructure & Operations, AWS, Information Security & Data Protection
Employee Type: Full Time - Office
Job Type: Cloud Security & Dev Sec Ops Engineer
Industry: Information Technology & Services
We're looking for a teammate to strengthen our technology team and take ownership of application security, cloud infrastructure and Dev Sec Ops processes.
We don't just want someone who finds vulnerabilities. We want someone who analyzes risks, builds solutions, improves our infrastructure and makes security a natural part of the software development process.
Onkatec is an AWS Advanced Tier Services Partner and won the AWS Consulting Partner of the Year - Turkey award at the 2026 Regional AWS Partner Awards. We deliver end-to-end technology solutions for businesses across Cloud, Dev Ops, Migration & Modernization, Security and Generative AI.
Responsibilities- Run regular security checks on web applications, APIs and cloud infrastructure.
- Perform vulnerability scans and authorized penetration tests when needed.
- Prioritize the vulnerabilities you find and work with the development team to get them fixed.
- Improve the security and configuration of our cloud infrastructure, AWS first and foremost.
- Integrate automated security checks (SAST, DAST, SCA) into CI/CD pipelines.
- Manage security processes across Docker, Kubernetes and Linux environments.
- Build out logging, monitoring, alerting and security incident response.
- Standardize security processes and automate them as much as possible.
- Experience with Linux, networking and system security.
- Hands-on knowledge of AWS or a similar cloud platform.
- A strong command of web and API security and the OWASP Top 10.
- Experience with Burp Suite, OWASP ZAP, Nessus, Nmap, Trivy or similar tools.
- Familiarity with Docker, Kubernetes, Git and CI/CD processes.
- Knowledge of IAM, WAF, network security and secrets management.
- The ability to solve security problems, not just report them.
- Takes ownership and follows work through
- Spots risks and acts on them without waiting to be told
- Works closely and smoothly with the development team
- Enjoys researching, learning and improving processes
- Strikes the right balance between security and development speed
Our goal isn't just to run security tests; it's to build secure, sustainable and scalable systems.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).