About the company
Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories.
Responsibilities
- Integrate and maintain security tools across the CI/CD pipeline: SAST (e.g., SonarQube), SCA / Dependency Scanning (e.g., Snyk, Trivy, GitHub Dependabot), Secret Detection (e.g., Gitleaks, HashiCorp Vault), Container/Image Scanning (e.g., Aqua, Prisma Cloud, Trivy)
- Drive security automation and enforcement for: Infrastructure as Code (e.g., Terraform), Configuration Management (e.g., Ansible, Chef), GitOps workflows (e.g., ArgoCD)
- Embed security guardrails and best practices across the SDLC
- Automate compliance checks (e.g., OWASP Top 10, CIS Benchmarks) into development workflows
- Integrate with observability and monitoring systems (e.g., Prometheus, Grafana, ELK, Coralogix)
- Collaborate cross-functionally with Product, QA, Development, and IT/Ops teams to continuously improve the security posture
- Participate in on-call rotations for production systems as needed
Requirements
- BS degree in computer science, computer engineering, relevant technical discipline or equivalent practical experience
- At least 6 years’ experience as DevOps/DevSecOps/Security Engineer
- Experience with CI/CD tools and source control management tools (e.g., Git, Azure DevOps, SonarQube, Artifactory etc.)
- Proven experience securing CI/CD pipelines
- Expertise in SCA, SAST, secret scanning, and container security
- A minimum of 3 years of exposure running production workloads (AWS, Azure or GCP)
- Hands-on experience with Kubernetes, Docker, and GitOps tooling (ArgoCD or Flux)
- Proven Scripting capabilities: (e.g. PowerShell/Bash/Python)
- Experience with logging, SIEM, and monitoring platforms
- Experience with IAM, secrets management, and compliance frameworks (SOC2, ISO, etc.)
- High level Linux OS expertise
- Strong troubleshooting skills
- Proactive by nature; internal drive for excellence and improvement
Conditions