The Ideal Candidate

The ideal candidate is a senior, hands‑on DevSecOps Engineer with strong experience operating and securing cloud‑native production environments in regulated settings.

They have deep expertise in AWS, Kubernetes and Infrastructure as Code, and are comfortable owning production reliability, security monitoring, incident response and audit readiness (e.g. SOC2, PCI‑DSS). They favour automation over manual processes and take a pragmatic, security‑first approach to building and running scalable platforms.

This individual works well across engineering teams, communicates clearly in a distributed environment, and is confident mentoring others on secure infrastructure and DevSecOps best practices.

The Role

The DevSecOps Engineer's objective is to integrate security controls and maintain a highly available cloud infrastructure. You will ensure our platform remains secure, scalable, and compliant with relevant security standards (including SOC2 and PCI-DSS) by focusing on the running, securing, and monitoring of services in production.

Key Objectives:

• Production Excellence: Operate production environments with a "security-first" mindset, monitoring both availability and potential threats.
• Infrastructure as Code: Build and maintain secure IaC to manage platform scaling and consistency.
• Continuous Compliance: Ensure the success of security audits through automated compliance checks and rigorous evidence collection.
• Culture & Collaboration: Bridge the gap between development, security, and operations to foster a robust DevSecOps culture within the wider Engineering department.

Responsibilities

• Infrastructure Management: Manage core AWS services (EKS, RDS, S3, Lambda) with a focus on encryption, least-privilege access, and service reliability.
• Monitoring & Incident Response: Develop and refine strategies for monitoring system health and security events using tools like OpenSearch, Prometheus, and Grafana.
• Compliance & Auditing: Ensure all AWS environments meet relevant security standards. Implement and monitor "Policy as Code" using Terraform to automate audit-readiness.
• Deployment & Security Automation: Maintain configurations for automation tools, secure deployments, and vulnerability scans. Work with standardized SDLC tools to ensure consistent delivery to production.
• Cross-Team Collaboration: Work closely with the teams and Software Engineers to ensure application deployments are successful, working as intended, and compliant with security standards.
• Technical Mentorship: Provide leadership and guidance on secure infrastructure practices to other Software Engineers across the organization.
• This position involves on-call responsibilities: Responding to operational incidents when necessary. We aim to minimize unnecessary paging and build fault-tolerant systems that reduce operational load.

Skills and Experience

Successful candidates for this role will generally possess the following qualifications and skills:

• 5 years+ in a DevSecOps, SRE, or Cloud Engineering role, preferably in fintech or a highly regulated environment.
• Deep expertise in AWS (specifically IAM, EKS, VPC, S3, RDS, and EC2).
• Strong understanding of TCP/IP, DNS, firewalls, and security tools (e.g., WAF, KMS, Shield).
• Extensive experience with Docker and Kubernetes (EKS), including administration and deployment via Helm.
• Proficiency in Terraform for managing complex cloud environments.
• Experience securing and tuning PostgreSQL, MySQL, or MariaDB.
• Experience with GitLab CI, ArgoCD, or Atlantis.
• Proficiency in Python or Bash for automation tasks.

Personality Attributes

• Ability to thrive under the pressure of audit deadlines and production incidents.
• A strong preference for automated solutions over manual intervention.
• Strong communication skills for working with distributed teams across multiple time zones.

We are seeking a seasoned recruiter to join Globalli and support the hiring of both technical roles (engineering, SRE, data) and professional HR/workforce management roles (payroll specialists, implementation managers, payroll success). The ideal candidate will be responsible for full-cycle recruiting, including sourcing, screening, interview coordination, and onboarding handovers, while building strong pipelines and proactively managing candidate experience. Fluency in English is required, and Spanish or other major languages are highly desirable, particularly for sourcing candidates across EMEA and LATAM markets. Experience with LinkedIn Recruiter and managing an ATS, ideally Greenhouse, is essential for success in this role.

This is a remote-first role, with preferred locations including India, South Africa, Mexico, or other cost-effective regions in Europe. Candidates must be able to work hours that overlap 4-8 hours daily with NYC (EST/EDT) to coordinate effectively with the People team and hiring managers.

Key Responsibilities

• Conduct full cycle recruiting for technical and HR/workforce roles, including job specs, sourcing, screening, interviews, reference checks, and onboarding handovers.
• Source passive technical and professional candidates using LinkedIn Recruiter and other sourcing tools, building proactive talent pipelines.
• Manage Greenhouse ATS workflows, maintain candidate data hygiene, and generate hiring reports.
• Create compelling job postings and candidate outreach messaging targeted to startup and HR-tech talent.
• Draft scorecards, interview plans, and standardize hiring processes for hiring managers.
• Produce weekly hiring reports, including pipeline health, time-to-fill, offers extended/accepted, and source effectiveness.
• Partner closely with hiring managers to define role requirements and timelines.
• Occasionally support payroll/contract hires and manage vendor relationships for local hires.
• Contribute to employer branding, including career pages, candidate experience, and social sourcing initiatives.

Must-Have (Non-Negotiable)

• 3+ years full cycle recruiting experience, including technical and professional roles.
• Fluent in English (written & spoken).
• Experience with LinkedIn Recruiter for sourcing candidates across technical and professional roles.
• Experience managing an ATS, ideally Greenhouse, including candidate tracking, reporting, and maintaining data hygiene.
• Comfortable in fast-paced startup environments and willing to wear multiple hats.
• Strong organizational skills and excellent candidate/stakeholder communication.
• Reliable internet, home office setup, ability to work overlapping hours with US East Coast.

Nice-to-Have (Preferred)

• Experience recruiting for HR-tech, payroll, EOR, or fintech companies.
• Technical recruiting experience for AWS / Kubernetes / Python / Java or SRE/infra engineers.
• Experience sourcing candidates across EMEA / LATAM / APAC markets.
• Fluency in Spanish (or another major language) is highly advantageous.
• Experience with remote hiring and managing time-zone complexities.

At 2U, we are all in on purpose. We are motivated by our mission – to eliminate the back row in education – and connected by our shared passion to deliver world-class digital education at scale. As the parent company of edX, the world’s leading online learning platform, 2U powers more than 4,000 online higher education offerings – from free courses to full degrees. Together with more than 230 colleges, universities, and corporate partners, we are helping to unlock human potential.

What We’re Looking For:

As the Senior Manager of Cybersecurity Operations, you will lead and mature 2U’s global cyber defense and security operations capabilities. This role is accountable for the effective execution of threat detection, incident response, vulnerability management, and operational security monitoring across a global enterprise.

You will manage and develop a team of security engineers responsible for day-to-day security operations, while also acting as the operational bridge between cybersecurity engineering, infrastructure, SRE, IT, and external partners (including managed or embedded resources). While remaining technically credible, your primary focus will be on operational excellence, incident readiness, process maturity, and ensuring consistent, high-quality execution of security operations at scale.

This role requires strong leadership, sound judgment under pressure, and the ability to translate technical security events into clear risk-based communication for senior stakeholders. You will own operational outcomes, ensure alignment to industry frameworks, and continuously improve tools, processes, and team capability to reduce risk across 2U’s most critical systems.

Responsibilities Include, But Are Not Limited To:

Cybersecurity Operations & Execution

• Own and oversee day-to-day cybersecurity operations, ensuring effective threat detection, investigation, response, and remediation across cloud, application, and infrastructure environments.
• Ensure security monitoring, alerting, and response processes are consistently executed, well-documented, and aligned to defined SLAs and severity models.
• Provide operational oversight of security tooling (e.g., SIEM, EDR, SOAR), ensuring tools are properly configured, maintained, and delivering actionable outcomes.
• Drive continuous improvement of operational runbooks, response workflows, and automation to reduce manual effort and improve response quality.

Cybersecurity Incident Management & Operational Readiness

• Own the cybersecurity incident management program, ensuring incidents are triaged, escalated, coordinated, and resolved effectively.
• Ensure clear roles, escalation paths, and communications are in place for security incidents, including coordination with SRE, Engineering, Infrastructure, IT, Legal, Privacy, and Communications teams.
• Lead post-incident reviews for security incidents, driving root cause analysis, remediation tracking, and systemic improvements.
• Ensure incident response practices align with industry standards and internal risk management expectations.

Engineering, Cloud & Application Security Alignment

• Partner with Cloud Security, Application Security, and Engineering teams to ensure security controls, detections, and response requirements are operationalised within cybersecurity operations.
• Ensure outputs from Cloud Security and Application Security initiatives (e.g., controls, detections, alerts, runbooks) are effectively integrated into security monitoring, incident response, and operational workflows.
• Act as the primary intake point for security-relevant operational signals from engineering and platform teams, ensuring they are triaged, prioritised, and actioned appropriately by cybersecurity operations.
• Collaborate with partner teams to identify gaps in detection, response coverage, and operational readiness, and drive improvements to expand and mature cybersecurity operations coverage.
• Serve as an escalation and advisory point for security-related operational issues, ensuring coordination with the appropriate domain owners (Cloud, Application, Infrastructure, SRE) while maintaining clear accountability.

Security Operations Coverage & Readiness

• Ensure cybersecurity operations maintain effective visibility and response capability across cloud, infrastructure, and application environments, aligned to defined risk and threat models.
• Oversee the integration of logging, telemetry, alerts, and response playbooks into operational tooling (e.g., SIEM, SOAR, EDR), without assuming ownership of underlying platform or application architectures.
• Partner with domain security teams to validate that new systems, services, and changes are adequately covered by operational security monitoring and incident response processes.
• Continuously assess and improve operational coverage to ensure cybersecurity operations can detect, respond to, and support incidents across the evolving technical environment.

Proactive Risk & Vulnerability Management

• Own the operational vulnerability management lifecycle, ensuring vulnerabilities are identified, prioritized, remediated, and tracked to closure.
• Use risk-based prioritization to balance remediation effort with business impact and operational realities.
• Ensure security findings and risk trends are translated into clear, actionable insights for technical and non-technical stakeholders.

Team Leadership & Partner Management

• Lead, mentor, and develop cybersecurity operations engineers, fostering a culture of accountability, continuous improvement, and operational excellence.
• Provide direction and oversight to embedded or partner resources (e.g., Sonata), ensuring clear expectations, quality delivery, and alignment to 2U standards.
• Contribute to workforce planning, skills development, and operational maturity of the cybersecurity operations function.

Things That Should Be In Your Background:

• 5+ years experience in cybersecurity or security operations, with progression into technical leadership or people management.
• Experience leading or supporting security operations, incident response, or threat management in complex environments.
• Working knowledge of AWS; exposure to GCP or Azure is a plus.
• Comfortable with scripting/automation (e.g., Python, Bash) to guide and review operational improvements.
• Experience partnering on CI/CD and DevSecOps initiatives to ensure security signals feed into detection and response.
• Familiarity with cloud-native and containerised environments and their operational security risks.
• Required: Hands-on experience with SIEM and EDR platforms supporting security monitoring, investigation, and incident response.
• Beneficial: Experience with SOAR workflows and WAF technologies to support security automation and application protection.
• Strong analytical judgment, able to make risk-based decisions under pressure.
• Clear communicator with both technical teams and senior stakeholders.

Benefits & Culture

Our global employee base is a diverse collection of innovators, dreamers, and doers working together to transform lives through higher education. We believe that every employee can advance our shared purpose, and that life at 2U should be fun and meaningful. If you’re excited by the opportunity to provide over 40 million learners and counting with access to world-class online higher education, then join us – and do work that makes a difference. #NoBackRow

We offer comprehensive benefits (unique per country) and excellent work/life balance.
Full-time, ZA benefits include: 

• 2 complimentary Getsmarter short courses per year
• Subsidised medical aid with Discovery Health Medical Scheme
• 4% 2U contribution towards Discovery Life Pension Fund and Group Risk Benefit
• Employee Assistance Program (EAP)
• Generous leave policy including time off to volunteer for non-profit organization, study leave, sports leave and a company-wide festive season break

2U Diversity and Inclusion Statement

At 2U, we are committed to building and sustaining a culture of belonging, respect, and inclusion. We are proud of the steps we’ve taken to bring together an employee base that embodies diverse walks of life, ideas, genders, ages, races, cultures, sexual orientations, abilities and other unique qualities. We strive to offer a workplace where every employee feels empowered by what makes us different, as well as by how we are alike. 

2U is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodations, please reach out to us at: recruitingaccommodations@2u.com. 

About 2U

For more than a decade, 2U has been the digital transformation partner of choice to great non-profit colleges and universities delivering high-quality online education at scale. As the parent company of edX, a leading global online learning platform, 2U provides over 45 million learners with access to world-class education in partnership with more than 230 colleges, universities, and corporations. Our people and technology are powering more than 4,000 digital education offerings — from free courses to full degrees — and helping unlock human potential. To learn more: visit 2U.com.

About edX

edX is the education movement for restless learners and a leading global online learning platform from 2U. Together with the majority of the world’s top-ranked universities and industry-leading companies, we bring our community of over 45 million learners world-class education to support them at every stage of their lives and careers, from free courses to full degrees. And we're not stopping there — we're relentlessly pursuing our vision of a world where every learner can access education to unlock their potential, without the barriers of cost or location. Learn more at edX.org.

Learn more at https://2u.com/careers/
#NoBackRow

The above statements are intended to describe the general nature and level of work performed by individuals assigned to this position, and are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed.

2U is an equal opportunity employer that does not discriminate against applicants or employees and ensures equal employment opportunity for all persons regardless of their race, creed, color, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, marital status, disability, citizenship, military or veterans’ status, or any other classifications protected by applicable federal, state or local laws. 2U’s equal opportunity policy applies to all terms and conditions of employment, including but not limited to recruiting, hiring, training, promotion, job benefits and pay. 

2U is strongly committed to diversity within its community and especially welcomes applications from South African citizens who are members of designated groups who may contribute to Employment Equity within the workplace and the further diversification of ideas. In this regard, the relevant laws and principles associated with Employment Equity will be considered when appointing potential candidates. We are required by law to verify your ability to work lawfully in South Africa. 2U requires that you submit a copy of either your identity document or your passport and any applicable work permit if you are a foreign national, along with an updated curriculum vitae.

takealot.com, a leading South African online retailer, is looking for a highly talented Software Engineering Manager to join our team in South Africa. 

Think you’ve been challenged before? Think again!

• Scale: 4 million happy shoppers shop online on takealot.com. Show them what you can do.
• Learn: We work with the best of the best, and then some. Code alongside industry leaders and upskill in record time. 
• Grow: Expand your career in the fast-growing Takealot Group: takealot.com and Mr D. We like to promote from within: Here’s your chance. 

Who’s who in the tech space

The position reports to the Engineering Director: Logistics.

Your mission, should you choose to accept it:

• Build and retain a high-caliber engineering team
• Build relationships through regular one-on-one conversations
• Remove roadblocks and interruptions to help the team perform
• Be involved with architectural and strategic planning with peers and senior developers
• Work with stakeholders to gather requirements, and manage expectations
• Support and develop the careers of members of the team
• Support and give direction to innovation in the team
• Present practical input for strategic technology decisions
• Stay up to date with industry trends, and standards
• Lead the Agile processes within the team
• Manage the roadmap for the team, playing a key role in prioritization
• Successfully see new projects to completion and launch new products while maintaining the existing code base.
• Facilitate discussions in the team and ensure a good design methodology is used on projects.
• Resolve conflict in the team when necessary
• Promote the achievements of the team
• Track and ensure team productivity is healthy using a metrics-based approach
• Track and ensure operational excellence in the team using a metrics-based approach
• Interview candidates for technical and organizational fit
• Drive innovation, vision, and strategy

The skills we need:

• A solutions-oriented, can-do attitude and high-energy
• Strong analytical and critical thinking, using data to inform decisions
• Solid quantitative skills
• Ability to interview and interact professionally with internal and external people
• Capability to present ideas succinctly, in writing and verbally
• Versatile and with the appetite to learn by doing

Qualifications & Experience:

• Bachelor's Degree or Advanced Diploma in Computer Science, Engineering, or any related area of study. In the event that you do not have a Bachelor’s Degree or an Advanced Diploma, equivalent experience in the related area is sufficient. 
• Demonstrable experience leading and managing a team of engineers on complex software projects.
• Experience developing software in an agile, quality-focussed environment.
• Experience with a broad range of related disciplines such as Development, Cloud Infrastructure, Site Reliability, Provisioning, Configuration Management, and Managed Systems.
• Good SQL experience in a high-load environment.
• Significant technical experience and a proven track record of architectural ownership and understanding.
• Experience with Open Source Operating Systems and technologies.
• Experience with Web Architectures (e.g. SOA, REST).
• Excellent understanding of theoretical Software Engineering fundamentals, including but not limited to distributed systems, highly scalable systems, algorithms, data structures, design patterns, and programming paradigms is advantageous.
• Experience with e-commerce-based applications is advantageous.
• Experience working with GCP/AWS and/or other cloud platforms.

Let’s talk about life @ Takealot Group

• The power is in your hands: We offer a market-related, Total Remuneration Package that allows full flexibility according to your needs. Go on, be the master of your own destiny.
• No doors: We aren’t fans of stuffy offices or siloed work environments. See someone you like? High five, collab and make something great.
• Remote working: Love water cooler chats and working from home? Takealot.com offers a hybrid working model for the best of both worlds.
• Mentorship programme: We aren’t kidding when we say the people with the best people win. Now’s your chance to be one of the best, by learning from the best.
• Naspers Tech Community & Online Learning: Share ideas and grow with global industry leaders who are all just a Slack message away. Love to learn? Up-skill with free access to courses on MyAcademy, Udacity, Coursera, and more.
• Good times: Get to know the other extraordinary minds at takealot.com during regular social events and out-of-office activities (think hikes, think mini golf, think good times).
• Staff discount. Millions of products across 28 departments. What more could you ask for?
• Birthday leave: Cake Day all the way. Enjoy your day off - you deserve it. 
• Right tools, right job: We work on Mac, but whether you prefer two monitors or one. You’ll work on the latest tech, with the latest tech.
• Help when you need it most: Confidential counseling, legal support, and financial guidance, for free, anytime, anywhere. 
• Tech stack (for days): Angular, Scala, Kotlin, Google Cloud, Kafka, Redis, Kubernetes and all things machine learning. If you build it, they will come.
• Free parking: No more 5km fun runs to your desk (unless you want to). 

Like what you see? 

If you meet the above you are an Extraordinary Mind. Apply today!!

Takealot is an Equal Opportunity Employer. Applicants from previously disadvantaged groups and people with disabilities will be given a preference

takealot.com, a leading South African online retailer, is looking for a highly talented Software Engineering Manager to join our team in South Africa. 

Think you’ve been challenged before? Think again!

• Scale: 4 million happy shoppers shop online on takealot.com. Show them what you can do.
• Learn: We work with the best of the best, and then some. Code alongside industry leaders and upskill in record time. 
• Grow: Expand your career in the fast-growing Takealot Group: takealot.com and Mr D. We like to promote from within: Here’s your chance. 

Who’s who in the tech space

The position reports to the Engineering Director (Logistics).

Your mission, should you choose to accept it:

• Build and retain a high-caliber engineering team
• Build relationships through regular one-on-one conversations
• Remove roadblocks and interruptions to help the team perform
• Be involved with architectural and strategic planning with peers and senior developers
• Work with stakeholders to gather requirements, and manage expectations
• Support and develop the careers of members of the team
• Support and give direction to innovation in the team
• Present practical input for strategic technology decisions
• Stay up to date with industry trends, and standards
• Lead the Agile processes within the team
• Manage the roadmap for the team, playing a key role in prioritization
• Successfully see new projects to completion and launch new products while maintaining the existing code base.
• Facilitate discussions in the team and ensure a good design methodology is used on projects.
• Resolve conflict in the team when necessary
• Promote the achievements of the team
• Track and ensure team productivity is healthy using a metrics-based approach
• Track and ensure operational excellence in the team using a metrics-based approach
• Interview candidates for technical and organizational fit
• Drive innovation, vision, and strategy

The skills we need:

• A solutions-oriented, can-do attitude and high-energy
• Strong analytical and critical thinking, using data to inform decisions
• Solid quantitative skills
• Ability to interview and interact professionally with internal and external people
• Capability to present ideas succinctly, in writing and verbally
• Versatile and with the appetite to learn by doing

Qualifications & Experience:

• Bachelor's Degree or Advanced Diploma in Computer Science, Engineering, or any related area of study. In the event that you do not have a Bachelor’s Degree or an Advanced Diploma, equivalent experience in the related area is sufficient. 
• Demonstrable experience leading and managing a team of engineers on complex software projects.
• Experience developing software in an agile, quality-focussed environment.
• Experience with a broad range of related disciplines such as Development, Cloud Infrastructure, Site Reliability, Provisioning, Configuration Management, and Managed Systems.
• Good SQL experience in a high-load environment.
• Significant technical experience and a proven track record of architectural ownership and understanding.
• Experience with Open Source Operating Systems and technologies.
• Experience with Web Architectures (e.g. SOA, REST).
• Excellent understanding of theoretical Software Engineering fundamentals, including but not limited to distributed systems, highly scalable systems, algorithms, data structures, design patterns, and programming paradigms is advantageous.
• Experience with e-commerce-based applications is advantageous.
• Experience working with GCP/AWS and/or other cloud platforms.

Let’s talk about life @ Takealot Group

• The power is in your hands: We offer a market-related, Total Remuneration Package that allows full flexibility according to your needs. Go on, be the master of your own destiny.
• No doors: We aren’t fans of stuffy offices or siloed work environments. See someone you like? High five, collab and make something great.
• Remote working: Love water cooler chats and working from home? Takealot.com offers a hybrid working model for the best of both worlds.
• Mentorship programme: We aren’t kidding when we say the people with the best people win. Now’s your chance to be one of the best, by learning from the best.
• Naspers Tech Community & Online Learning: Share ideas and grow with global industry leaders who are all just a Slack message away. Love to learn? Up-skill with free access to courses on MyAcademy, Udacity, Coursera, and more.
• Good times: Get to know the other extraordinary minds at takealot.com during regular social events and out-of-office activities (think hikes, think mini golf, think good times).
• Staff discount. Millions of products across 28 departments. What more could you ask for?
• Birthday leave: Cake Day all the way. Enjoy your day off - you deserve it. 
• Right tools, right job: We work on Mac, but whether you prefer two monitors or one. You’ll work on the latest tech, with the latest tech.
• Help when you need it most: Confidential counseling, legal support, and financial guidance, for free, anytime, anywhere. 
• Tech stack (for days): Angular, Scala, Kotlin, Google Cloud, Kafka, Redis, Kubernetes and all things machine learning. If you build it, they will come.
• Free parking: No more 5km fun runs to your desk (unless you want to). 

Like what you see? 

If you meet the above you are an Extraordinary Mind. Apply today!!

Takealot is an Equal Opportunity Employer. Applicants from previously disadvantaged groups and people with disabilities will be given a preference

About Nintex: 

At Nintex, we are transforming the way people work, everywhere.   

As the global standard for process intelligence and automation, we're trusted by over 10,000 public and private sector organizations across 90 countries. Our customers, from industry giants like Amazon, Coca-Cola, and Microsoft, rely on the Nintex Platform to accelerate their digital transformation journeys by managing, automating, and optimizing business processes quickly and efficiently. We improve their lives through the technology we build.  

We are committed to fostering a workplace that supports amazing people in doing their very best work every day. Collaboration is constant, our workplace is fun, the environment is fast-paced, and we value our people’s curiosity, ideas, and enthusiasm. Driven by passion and accountability, we take initiative, measure progress, and deliver results. Our culture fosters innovation and problem-solving, fueled by curiosity and a commitment to thinking big. Together, we move with agility, prioritize customer needs, and build unity through empathy, leaving a positive impact wherever we go.  

Working in engineering: 

Working at Nintex as an engineer means building more than just software; it’s about making a tangible impact with every line of code. Our engineers are process experts, developing the industry’s most complete process and automation platform to transform the way people work. If you’re interested, curious and want to learn and do more, the sky is the limit here. We take a solutions-oriented and collaborative approach, constantly innovating our business and products. 

About the role: 

As a Platform Security Engineer, you are a developing security professional building expertise in securing cloud-native infrastructure, container platforms, CI/CD pipelines, and product services within the Platform Engineering organization. You take ownership of moderately complex security tasks with increasing autonomy while receiving guidance on architectural decisions and strategic direction. Your focus is the security posture of our platform and product infrastructure — the container orchestration layer, service mesh, observability stack, CI/CD pipelines, and cloud infrastructure that engineering teams build and deploy on.  

You implement and maintain security controls, build standardized security processes for engineering teams (vulnerability management, production security checks, secure build pipelines), support penetration testing and SOC operations for the product environment, contribute to compliance-related activities from the product security perspective, and help embed security practices into the developer experience through tooling and documentation.  

You are building depth and maturity in infrastructure security, application security, and shift-left practices needed to progress toward a senior platform security role. 

Your contribution will be: 

• You implement and maintain security controls across the platform, including container orchestration security policies, network segmentation, role-based access controls, and admission control mechanisms. 
• You manage container image scanning and enforce image policies in CI/CD pipelines and cluster admission, ensuring only vetted and signed images reach production environments. 
• You support infrastructure-as-code security scanning using policy-as-code tooling, flagging and remediating misconfigurations in infrastructure definitions before they reach production. 
• You maintain and improve secrets management workflows, ensuring rotation policies are enforced, access is audited, and no secrets are hardcoded or exposed in source code or configuration. 
• You support cloud security posture management across cloud environments, monitoring for drift, misconfiguration, and compliance deviations against established baselines. 
• You support service mesh security configuration including mutual TLS enforcement, authorization policies, and traffic policies that enforce zero-trust communication between platform services. 
• You contribute to tenant isolation and access control configuration for shared platform services, ensuring appropriate segmentation between teams and environments. 
• You conduct vulnerability assessments of platform and product infrastructure components, coordinating remediation with SRE, Platform Engineering, and product service teams. 
• You maintain a vulnerability tracking system and produce regular reporting on security posture, remediation velocity, and risk trends for engineering leadership. 
• You implement and maintain security gates in CI/CD pipelines including dependency scanning, static application security testing (SAST), software composition analysis (SCA), and container image scanning. 
• You participate in security incident response for platform and product-related events, supporting investigation, containment, evidence preservation, and documentation under guidance from the Senior Platform Security Engineer. 
• You support compliance-related activities from the product security perspective, providing evidence, documentation, and technical validation for audits and assessments (SOC 2, ISO 27001, CIS Benchmarks) without owning the compliance program itself. 
• Vulnerability report generation, security posture dashboards, and remediation workflow tooling. 
• You contribute to security reviews for infrastructure and product changes, providing feedback on pull requests and architecture proposals from a security perspective. 
• You explain security concepts and requirements to engineering teams, empowering them to build securely and understand the rationale behind security controls. 

To be successful, we think you need: 

Minimum Requirements: 

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field; or equivalent combination of education and experience.
• 2+ years of professional experience in security engineering, infrastructure security, DevSecOps, application security, or related field. 
• Hands-on experience with at least one major cloud platform (Azure or AWS). 
• Working knowledge of container orchestration security concepts in Kubernetes: pod security, role-based access control, network policies, admission controllers. 
• Experience with infrastructure-as-code tools and understanding of how to secure IaC workflows. 
• Understanding of CI/CD pipeline security: dependency scanning, SAST/SCA integration, artifact integrity.
• Understanding of security frameworks and compliance standards (SOC 2, ISO 27001, CIS Benchmarks, OWASP). 
• Proficiency in scripting (Python, Bash, Go, or PowerShell) for security automation and tooling. 
• Proficiency with programing languages ( C#, Javascript/Typescript).
• Experience with or exposure to penetration testing concepts, vulnerability management workflows, and security incident response. 
• Strong communication skills with the ability to explain security findings and build standardized processes that engineering teams adopt. GitHub and/or Azure DevOps pipelines 

 What’s in it for you? 

Nintex has a hybrid working model, enabling us to build culture, learn, and grow together. We intentionally connect and collaborate, while emphasizing flexibility with a blend of at-home and in-office work. This role is a hybrid role in our local Nintex office.

While our offerings differ from country to country, we offer our entire global workforce an array of exciting perks and benefits, including 

• Global Gratitude and Recharge Days
• Flexible, paid time off policy
• Employee wellness programs and counseling resources
• Meaningful peer recognition and awards
• Paid parental leave
• Invention/patenting assistance
• Community impact, paid volunteer time, and opportunities
• Intercultural learning and celebration
• Multiple tools through which to learn and grow, and an incredible global community 

View more about our benefits here: https://www.nintex.com/wp-content/uploads/2023/01/Global-Perks-and-Benefits.pdf.  

Equity Statement: Preference will be given to People Living with Disability who are members of the designated groups in line with the Employment Equity Plan and Targets of the Company.

About us:

Luno is the crypto investment app you can rely on, enabling you to buy, store and explore crypto securely. We’re committed to putting the power of cryptocurrency in everyone's hands sensibly and responsibly.

Since 2013, we’ve helped millions of people around the world invest safely in crypto. We do this by cutting through the hype and supporting customers at every step of the way. All products and cryptocurrencies on our platform must first meet stringent legal, risk and technical security standards. 

Transparency is key for us. Luno stores all crypto on a 1:1 basis and we have rigorous processes in place so you can be confident your investment is secure. We’re available in more than 40 countries around the world and we work closely with respective regulators in all of these markets to be fully compliant, as we believe this is the best way to help everyone, everywhere, invest safely.

About the team:

The Cloud Security team at Luno is responsible for identifying security threats and improvement areas within our cloud hosted resources, and ensuring that we both strive to implement best practices everywhere and detect any deviations. This team works closely with engineering and IT operations to ensure the best security practices are followed in both areas of the business.

About the role: 

We're looking for a AWS Cloud Security Analyst to be a force multiplier across the organisation, someone who brings deep cloud security expertise, strong architectural thinking, and the confidence to challenge assumptions when needed.You’ll work hands-on across our AWS, Kubernetes, CI/CD and developer environments, surfacing risks early, designing secure patterns, automating controls, and strengthening the foundational security posture that underpins a global crypto exchange.This is a role for someone who wants to build, influence, advise, and elevate — not just run scanners.

Your mission will be:

• Continuously assess and uplift the security posture of our AWS and Kubernetes environments through automation and secure-by-design principles.
• Partner closely with Engineering, SRE, and IT Ops to deliver practical, business-enabling security solutions — not blockers.
• Analyse existing infrastructure and microservice architectures, highlight systemic risks, and define secure patterns that scale.
• Lead security input across new projects from design → delivery, ensuring resilient architectures and guardrails are in place early.
• Develop proof-of-concepts, hardening strategies, and safe rollout plans for improvements.
• Strengthen detection and response capabilities by improving security telemetry, triage, anomaly detection, and automation

• Advanced AWS expertise — ideally with Professional or Specialty certifications.
• Strong experience in Kubernetes, cluster security, and containerised workloads.
• Background in Cloud Engineering / SRE / DevOps / Systems with strong security instincts.
• Proficiency in automation and scripting (Python preferred).
• Hands-on experience with Terraform and secure IaC patterns.
• A solid understanding of CI/CD pipelines and the SDLC.
• A mindset that balances pragmatic engineering with strong security judgement.
• Curiosity, ownership, and a genuine passion for learning and improving systems

Life at Luno:

• Remote but reachable work policy gives you the freedom to choose between working from home or the office.
• Plus the option to buy and sell up to 5 days leave
• Improve body and mind, with excellent private medical insurance
• Access to Learnably and our additional learning platforms for your personal and professional development
• 6 months primary care-giver leave
• Paw-ternity leave for your furry friend
• Annual Inspiration Day in addition to your annual leave which increases based on your length of service! 
• A collaborative, friendly work community, with regular social events.
• 0 fees up to a certain amount with Luno from the day you start.*

*Offer only available on Luno Instant Buy, not Luno Exchange

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.