DevSecOps Engineer

HeyBlu is a Romanian e-money licensed fintech company that aims to provide financial services to customers and merchants operating in the e-commerce space. Our vision is to increase the financial power of e-commerce buyers & sellers, making a positive impact in their everyday lives. We do this by extending the purchasing power of retail shoppers in easy and convenient ways, while also helping e-commerce merchants with the capital needed to grow their business. Being part of eMAG group, the largest e-commerce player in Romania, HeyBlu is focusing on building a financial offering for customers and merchants operating within the eMAG ecosystem by implementing an “embedded finance” approach. As part of the global Prosus group, we share the same purpose: “ Improving everyday life for billions of people through technology ”. In the HeyBlu team we are building an entrepreneurial, results-driven, agile, and collaborative culture based on the core values we share across the group: ownership, accountability, innovation, adaptability and customer focus. What you’ll have to do: Embed security practices across the entire software development lifecycle (SDLC) — from code review to production deployment; Integrate and maintain security tooling (SAST, DAST, SCA, secrets scanning) in CI/CD pipelines (GitLab CI); Design and enforce infrastructure security controls on cloud environments, with focus on NIS2 and DORA compliance; Manage vulnerability assessments, coordinate remediation with development teams, and track resolution SLAs; Own secrets management, access control policies, and identity governance across the platform; Build and maintain security monitoring, alerting and incident response playbooks (SIEM, log aggregation); Support and coordinate periodic security audits and penetration testing activities. How we’d like you to be: With hands-on experience as a Developer, DevOps, DevSecOps, SRE or Security Engineer; With practical experience with cloud infrastructure (AWS / Azure / GCP) and Linux systems administration; With experience with containers and orchestration (Docker, Kubernetes) and CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins or similar); With solid knowledge of Infrastructure as Code (Terraform, CloudFormation) and automation; With strong security fundamentals: IAM, encryption, network security, secrets management (Vault, AWS Secrets Manager, KMS); With experience with monitoring, logging and alerting solutions; knowledge of HA, Disaster Recovery and Business Continuity concepts; With analytical mindset, proactive attitude and a strong drive for automation and continuous improvement; With advanced English; strong communication and cross-team collaboration skills; comfortable working in an Agile environment.