Lead Security Engineer (DevSecOps & Compliance)

Join Zeely as a Security Officer and help us strengthen and scale security across our products and infrastructure.

You'll work closely with our engineering team, including a Security Engineer, as a trusted partner with real authority over technical decisions from a security perspective. As the company grows, you'll have the opportunity to build and lead a dedicated security team.

• 4 years on the market — a stable, profitable company backed by international investors;

• 6× growth over the past year;

• 2,000,000+ businesses already use Zeely;

• #1 in its category in the US market;

• 200+ specialists on the team;

• Markets: US + worldwide.

• →

  Assess our infrastructure and product from a security perspective;

• →

  Proactively identify, prevent, and help fix vulnerabilities across our product and infrastructure;

• →

  Lead incident response and help defend against attacks in real time;

• →

  Define and prioritize security initiatives and shape the security roadmap;

• →

  Work hands-on: close security tickets yourself and collaborate closely with the DevOps and Platform teams on implementation;

• →

  Integrate security into our development pipeline (SDLC / CI/CD);

• →

  Drive compliance initiatives, mainly SOC 2 (Type 1) and CASA, and implement relevant ISO 27001 controls;

• →

  Develop security policies, processes, and access management practices across our cloud infrastructure (AWS);

• →

  Review architecture decisions and code from a security perspective;

• →

  Support B2B clients with security-related questions, reviews, and due diligence.

• 7+ years of engineering experience;

• 3+ years in a Security Officer or Security Engineer role (a combined Security/DevOps role works too);

• Hands-on backend development background (Node.js / JavaScript / TypeScript, Java, or C#/.NET);

• Strong practical experience in DevOps and cloud infrastructure;

• Proven experience finding and fixing vulnerabilities and handling security incidents;

• AWS Professional-level certification (a security-focused Associate certification may also be considered);

• Hands-on experience implementing SOC 2 and/or ISO 27001 controls — owning the process end to end, not just maintaining existing policies;

• Experience with external security audits (Big Four experience is a plus);

• Upper-Intermediate (B2+) English or higher;

• Fluent Ukrainian.

• Experience with CASA assessments;

• Experience implementing GDPR and/or CCPA (CPRA) requirements;

• Understanding of PCI DSS (SAQ-A level);

• GCP certifications.

• A chance to shape how security evolves in a stable, profitable product company;

• A role with real ownership, including veto power over technical decisions from a security perspective;

• A clear growth path toward leading a security team;

• Work with cutting-edge technologies and contribute to building AI-powered tools;

• A strong team of A-level players who push each other to grow;

• A remote-first setup with offices in Warsaw and Kyiv;

• All the equipment you need for work, provided by the company;

• Regular performance reviews to keep your growth transparent and rewarded.

Intro Call → Technical Interview → Test Task → Final Interview → Reference Check → Offer.

Send us your CV — we'd love to meet you!