DevSecOps Engineer

At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we have pioneered the world's first fully automated suite of vehicle inspection systems. At the heart of this innovation lies our advanced AI-driven technology, representing the pinnacle of machine learning, GenAI, and computer vision within the automotive sector.

With close to $400M in funding and strategic partnerships with industry giants such as Amazon, General Motors, Volvo, and CarMax, UVeye stands at the forefront of automotive technological advancement. Our growing global team of over 200 employees is committed to creating a workplace that celebrates diversity and encourages teamwork. Our drive for innovation and pursuit of excellence are deeply embedded in our vibrant company culture, ensuring that each individual's efforts are recognized and valued as we unite to build a safer automotive world.

We seek a dedicated and proactive DevSecOps Engineer to join our DevOps team

In this role you will take ownership of all security-related tasks across the organization, be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.

A day in the life and how you’ll make an impact:

• Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.
• Establish, maintain, and evolve concepts in continuous integration and deployment (CI/CD) pipelines for existing and new services.
• Collaborate with Engineering and Operations teams to improve automation of workflows, infrastructure, code testing, and deployment of on-premise and cloud services.
• Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.
• Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.
• Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.
• Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.
• Work closely with stakeholders (CISO, COO, System Architects, DevOps Team Lead) to identify requirements and prioritize security needs.

Requirements:

• Bachelor’s degree in Computer Science or related technical field
• 4+ years of DevSecOps experience in a Linux environment
• Demonstrable experience working in DevOps with tools like Kubernetes, Terraform, Helm, GitOps workflows, and CI/CD tools (Jenkins, GitLab, or similar).
• Experience development in Python and scripting using bash
• Deep understanding of cloud platforms (AWS, GCP) and their security best practices.
• Strong knowledge of cloud networking(VPC), firewalls, IAM roles, and encryption.
• Familiarity with ISO 27001, SOC 2, GDPR, and other security and regulatory frameworks.
• Experience performing or overseeing penetration testing processes.
• Experience working with Forensic & Threat Detection Tools such as AWS GuardDuty, Azure Sentinel, SecurityHub, and other SIEM system
• Excellent verbal and written communication skills, capable of explaining technical security concepts to non-technical stakeholders.
• Ability to think critically and act decisively under pressure.

Bonus if you have:

• Cloud Security Posture Management: Orca Security, Wiz, Tufin
• Penetration Testing Tools: Metasploit, Burp Suite, or similar
• Endpoint security - cortex XDR
• Knowledge of Linux Kernel fundamentals including job management, memory management, file systems, networking & debugging

Why UVeye:

Pioneer Advanced Solutions: Harness cutting-edge technologies in AI, machine learning, and computer vision to revolutionize vehicle inspections.

Drive Global Impact: Your innovations will play a crucial role in enhancing automotive safety and reliability, impacting lives and businesses on an international scale.

Career Growth Opportunities: Participate in a journey of rapid development, surrounded by groundbreaking advancements and strategic industry partnerships.