At Wolt, as a part of Doordash, we’re building the industry’s most scalable and reliable delivery platform to support our three-sided marketplace of consumers, merchants, and courier partners. 

What makes our team unique

• Our global Security team aspires to be the world’s most admired security team, with members across EU, UK and North America (operating as Wolt, Deliveroo and Doordash).
• We’re shaping our next generation infrastructure that is hardened from the ground up. This is a rare opportunity - no legacy tech or off-the-shelf product solutions. There is a lot to do around this new development as well as our “classic” platforms of the three companies.
• The greater team is not just information security - we’re more holistic, and also physical security and safety are a part of our global operations.

Day-to-day in this role you’ll:

• Identify and prioritize risk-reducing and engineering-enabling improvements, and then implement and build them, for our infrastructure and cloud security. This may involve the cloud, access controls, the management plane, or just about any other part of infrastructure we have, across any of our platforms. Implementation and building may range from configuring services as infrastructure as code to actual coding of new features.
• Solve security-related questions and implement requests related to our infrastructure security, including reactive fixes related to vulnerabilities or design flaws.
• Guide our engineering teams related to security, privacy and technical compliance.

Over time, your role can evolve depending on your interests and skills. Our company is  a large place and there’s a lot to do!

This position is ideal for someone who would describe themselves as a cloud sysadmin, having an SRE role, or being a DevOps engineer. You are likely to have at least 5 years of full-time experience working in information technology.

As the Security team sometimes needs to address high-priority security issues as well as ensure the availability of the components we have built, this position includes an on-call duty. On-call compensation and terms will be agreed separately in accordance with the local employment law.

Our humble expectations

• Have hands-on experience with AWS, Kubernetes and how modern microservice architectures work. This is a “must” requirement.
• Are quick to form good working relationships with engineers who are building our platforms, as well as their engineering and product management.
• Are quick to learn nuances in a wide variety of additional services that relate to running a low-latency, high-availability infrastructure.
• Are fluent in at least one programming language, even if this comes from a hobby background.
• Have a strong work ethic, are organized and follow things through.
• Can communicate clearly and provide good visibility to issues as they progress.
• Can see through issues that have many aspects and different - often also non-technical and business-related - considerations.
• Are not scared of submitting and reviewing Pull Requests.
• And as Wolt’s company language is English, you’d need to be fluent in both spoken and written English.

This position is open in our Wolt hubs in Berlin, Germany, or Helsinki, Finland, and will be a part of the Global Security Engineering team.

Next steps

The position will be filled as soon as we find the right person, so make sure to apply as soon as you realize you really want to join us!

The Wow

We are seeking a talented, motivated and experienced DevSecOps Engineer in our Stockholm office with a strong focus on the implementation of security practices  and services within our Cloud Platforms Engineering team, with experience working in an AWS environment. In this role, you will be responsible for ensuring the secure and efficient delivery of software and services, as well as the implementation of robust security measures throughout the software development lifecycle. 

A taster of what you will be involved with: 

• Implement and maintain secure infrastructure on the cloud: Design, deploy, and manage secure AWS environments, leveraging various AWS services such as Amazon EC2, Amazon S3, AWS Identity and Access Management (IAM), AWS Lambda, and Edge Security services. Audit and monitor security groups, network access control lists (ACLs), and other security features to protect sensitive data and systems.
• Monitoring & Logging: Implement proactive security monitoring and alerting mechanisms, leveraging AWS services like AWS CloudTrail, Amazon Control Tower,, Amazon GuardDuty, and Amazon Inspector. Work closely with our Information Security team to identify and respond to security incidents, conduct forensic investigations.
• Vulnerability and Patch Management: Coordinate vulnerability scanning and patch management processes to mitigate security risks. Coordinate with external security vendors for penetration testing, security audits and the remediation of findings with operation teams.
• Security Incident response: Assist the Information Security team in managing security incidents, including containment, investigation, and recovery.
• Security architecture and design: Work closely with architects, central security team, and development teams to integrate security controls into the overall system architecture within AWS and Kubernetes infrastructure. Review and provide guidance on secure design principles, secure coding practices, and secure deployment strategies.
• You will be expected to form part of a 24/7 on call roster to support the engineering team during out of office incidents calls

What we are looking for

As a DevSecOp Platform Engineering team you will work with several stakeholders such as:

• Development teams
• Product owners
• Information Security teams
• Internal Area teams
• Architects
• Experience with the following technologies:
  • • AWS 
    • Kubernetes 
    • Terraform  
    • Github Advanced Security
    • Strong experience as a DevSecOps Engineer or similar role, with a focus on implementing security practices in AWS environments, including Kubernetes infrastructure.
    • In-depth knowledge of AWS services and their security features, such as IAM, VPC, S3, CloudTrail, GuardDuty, Inspector, as well as Kubernetes architecture and security controls.
    • Familiarity with infrastructure-as-code (IaC) tools like CloudFormation or Terraform for managing Kubernetes infrastructure.
    • Knowledge of best practices in IT operations, such as ITIL (IT Infrastructure Library) and DevOps principles.
    • Understanding of secure coding practices, API security, code scanning tools, and vulnerability management processes specific to Kubernetes environments.
    • Strong knowledge of security frameworks and standards (e.g., OWASP, NIST, CIS) applicable to both AWS and Kubernetes environments.

What we offer

Much like riding a rollercoaster, sometimes life at Betsson can be lightning fast with twists and turns but always FUN! Then again, what else would you expect from a business 75% millennial and 1700 strong, spread across 7 offices with 900 based out of our Malta HQ alone! We recognise it may not be for the faint-hearted, but if you’re a go-getter, initiator and adrenaline junkie, always striving to push the boundaries and challenge yourself, then you’ll fit right in.

Challenge accepted?

By submitting your application, you understand that your personal data will be processed as set out in our Privacy Policy