Build security into every deployment, without slowing innovation!

What if security was embedded in every commit, every build, and every release by design? As a DevSecOps Specialist at Coveo, you’ll make that vision real by integrating security seamlessly into our continuous integration and continuous delivery (CI/CD) pipelines and cloud infrastructure.

You’ll transform security from a checkpoint into an accelerator, building automation and self-service tooling that empower developers to ship confidently. If you’re passionate about scaling secure software delivery in the cloud, this is where you’ll have real impact.

As one of our DevSecOps Specialists, you will:

• Design and maintain security automation across CI/CD pipelines, embedding controls and security gates without slowing delivery.
• Build and operate infrastructure-as-code (IaC) pipelines with security built in, managing secrets, identity and access management (IAM) policies, and hardened configurations at scale.
• Integrate and evolve vulnerability management workflows, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and container scanning.
• Automate compliance checks and policy enforcement across Amazon Web Services (AWS) environments to ensure continuous alignment with security standards.
• Design and maintain access management automation to provision, audit, and monitor access to infrastructure and sensitive resources.
• Partner with engineering and platform teams to make security tooling intuitive, scalable, and developer-friendly, reducing friction across the delivery lifecycle.

Here is what will qualify you for the role:

• Strong hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, or similar) and embedding security controls directly into pipelines.
• Proficiency in Python or other scripting languages to build reliable automation and integrations.
• Practical experience securing and automating cloud environments (AWS preferred), including compute, storage, networking, and Kubernetes.
• Deep understanding of DevSecOps toolchains, including container security, secrets management, infrastructure-as-code scanning, dependency analysis, and vulnerability remediation workflows.

What will make you stand out:

• Advanced experience with Terraform for security-focused infrastructure, including IAM roles, encryption keys, and network controls.
• Hands-on experience with Kubernetes security, including role-based access control (RBAC), network policies, admission controllers, or image signing.
• Experience implementing compliance-as-code frameworks such as Open Policy Agent or AWS Config Rules.
• Relevant certifications such as AWS Security Specialty, Certified Kubernetes Security Specialist (CKS), or similar credentials.

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact HR@Coveo.com to discuss your needs.

Build security into every deployment, without slowing innovation!

What if security was embedded in every commit, every build, and every release by design? As a DevSecOps Specialist at Coveo, you’ll make that vision real by integrating security seamlessly into our continuous integration and continuous delivery (CI/CD) pipelines and cloud infrastructure.

You’ll transform security from a checkpoint into an accelerator, building automation and self-service tooling that empower developers to ship confidently. If you’re passionate about scaling secure software delivery in the cloud, this is where you’ll have real impact.

As one of our DevSecOps Specialists, you will:

• Design and maintain security automation across CI/CD pipelines, embedding controls and security gates without slowing delivery.
• Build and operate infrastructure-as-code (IaC) pipelines with security built in, managing secrets, identity and access management (IAM) policies, and hardened configurations at scale.
• Integrate and evolve vulnerability management workflows, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and container scanning.
• Automate compliance checks and policy enforcement across Amazon Web Services (AWS) environments to ensure continuous alignment with security standards.
• Design and maintain access management automation to provision, audit, and monitor access to infrastructure and sensitive resources.
• Partner with engineering and platform teams to make security tooling intuitive, scalable, and developer-friendly, reducing friction across the delivery lifecycle.

Here is what will qualify you for the role:

• Strong hands-on experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, or similar) and embedding security controls directly into pipelines.
• Proficiency in Python or other scripting languages to build reliable automation and integrations.
• Practical experience securing and automating cloud environments (AWS preferred), including compute, storage, networking, and Kubernetes.
• Deep understanding of DevSecOps toolchains, including container security, secrets management, infrastructure-as-code scanning, dependency analysis, and vulnerability remediation workflows.

What will make you stand out:

• Advanced experience with Terraform for security-focused infrastructure, including IAM roles, encryption keys, and network controls.
• Hands-on experience with Kubernetes security, including role-based access control (RBAC), network policies, admission controllers, or image signing.
• Experience implementing compliance-as-code frameworks such as Open Policy Agent or AWS Config Rules.
• Relevant certifications such as AWS Security Specialty, Certified Kubernetes Security Specialist (CKS), or similar credentials.

Do you think you can bring this role to life? Send us your application, we want to hear from you!

Join the Coveolife!

We encourage all qualified candidates to apply regardless of, for example, age, gender, disability, gaps in CV, national or ethnic background.

This job description was written by humans, assisted by AI. We may leverage technology in our hiring process to help us see the person behind the resume.

Coveo is committed to providing accessible employment practices. If you require accommodation due to a disability at any point during the recruitment process, please contact HR@Coveo.com to discuss your needs.

Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collaborative innovators, we are on a mission to enable safe user experiences and empower our communities by celebrating diversity, inclusion, and expression — all while maintaining robust trust-and-safety protocols. 

We embrace the best of both worlds! Local talent can thrive in our collaborative office space with the flexibility of a hybrid work environment, while remote team members play an integral role in shaping our dynamic culture from afar. We have offices in Montreal (Quebec), Austin (Texas) and Nicosia (Cyprus). 

*A select number of positions require full-time in office attendance* 

As a member of the Infrastructure Security team, you will act as a SME and advisor, playing a pivotal role in developing and implementing tools, controls and processes to build out our Cloud Security and Security Analytics programs. This role will provide you with the opportunity and autonomy to work in an advanced environment securing a wide range of technologies.

What You'll Be Doing:

• Help create and maintain a tactical security roadmap, initiatives, and improvements.
• Proactively identify security gaps and vulnerabilities within the infrastructure and develop plans to address them.
• Help develop security standards and guidelines.
• Develop & implement security tools, controls and automation for both cloud (AWS, Azure, GCP) and on-premises.
• Performing in-depth security architecture reviews and assessments.
• Work closely with various teams (e.g., Engineering, Operations, Compliance) to implement security measures and ensure consistent application of security policies.
• Govern and Implement security controls through Infrastructure as Code (IaC).
• Help develop and maintain our internal security analytics and data platform.
• Build data pipelines for ingesting posture and event information.
• Maintain comprehensive documentation of security configurations, policies, and procedures.
• Provide regular reports on security posture and key performance indicators (KPIs).

What you’ll need to be successful:

Must Haves:

• 3 - 5 years of experience working as DevOps, Cloud Engineer or Architect working with AWS, Azure and GCP.
• 1-3 years of experience managing and security infrastructure as code (IAC).
• Bachelor’s degree in Computer Science/Engineering, IT or Data Science.
• Solid experience securing and managing applications on Kubernetes.
• Experience scripting and parsing information in Python/BASH/GoLang.
• Solid understanding of scalability patterns applied to infrastructure architecture for high traffic systems.
• Good understanding of continuous integration and continuous delivery models and best practices.
• Excellent communication and time management skills.
• A love for making things efficient and reliable.

Nice To Haves

• Experience with data engineering and concepts such as ETL and Data Modeling.
• Experience with Gitlab.
• Industry Certifications (Security/DevOps/Data Analytics).
• Professional context switcher.
• Proactive and adept at taking initiative.

As an equal opportunity employer, we celebrate diversity and are committed to creating an inclusive environment for all employees

 In this role you may be exposed to adult content