DevSecOps Engineer

Fiverr is looking for an experienced DevSecOps Engineer with a strong focus on cloud infrastructure & IT security to join our team. As a DevSecOps Engineer you will have the opportunity to lead the protection, guidance, design, automation and support of Fiverr’s cloud and IT infrastructure security. You will also contribute to other security domains and initiatives such as Incident Response, Security Monitoring and Risk Management. You will work with our DevOps and IT groups to protect Fiverr’s highly scalable marketplace backend and our massive data processing pipeline, ingesting billions of daily events and supporting hundreds of microservices.

Requirements:

3+ years of experience in DevSecOps or Cloud Security roles
Extensive experience deploying and monitoring security in AWS
Proven working experience in CI/CD and development pipeline technologies
Strong Security tooling and processes expertise, including KMS, GuardDuty, and Cloudtrail, as well as with CSPM/DSPM tools
Proficiency in scripting, automation and IaC
Hands-on experience with IT security tools such as Endpoint protection, ZeroTrust, email and file protection, patch management and SSO
Proven knowledge of core security networking concepts
Have one or more security-related certifications, such as AWS Security Specialty Certification, CKS, CCSP or similar - an advantage
General understanding of regulatory compliance and how it relates to security and privacy.
Solid knowledge of information security principles and practices
Self-motivation with a strong drive and sense of ownership
Strong organizational skills and excellent attention to detail
Ability to effectively prioritize and execute tasks
Excellent English

What am I going to do?:

Develop and guide secure infrastructure practices and processes
Collaborate with Security, IT and Devops teams to define and execute security requirements
Detect, investigate, report and track security vulnerabilities and their mitigation
Maintain existing security tools and systems
Promote the implementation of tools and technologies to improve security and availability of Fiverr’s platform and IT environment.
Act as the organization’s focal point for cloud and IT security
Conduct security audits, network scans and vulnerability assessments against Fiverr's infrastructure
Participate in relevant security incidents and investigations
Train and educate relevant stakeholders on cloud infrastructure and IT best practices

Equal opportunities:

At Fiverr, we prioritize diversity. We celebrate difference and embed it into every aspect of our workplace and product, as well as our community. Fiverr is proud and committed to providing equal opportunity employment to all individuals regardless of race, color, religion, sex, sexual orientation, citizenship, national origin, disability, Veteran status, or any other characteristic protected by law. In addition, Fiverr will provide accommodation to individuals with disabilities or a special need.