Senior DevSecOps Engineer

Why we're hiring for this role: We're rapidly expanding, and with that comes an increasing urgency to mature our security posture. Compliance readiness, and proactive risk management are becoming equally critical — this role will be a key driver of those efforts alongside infrastructure ownership. This could be a unique opportunity to have a big impact in owning security initiatives and establishing a strong security baseline at Zocks.

Owning the full cloud infrastructure lifecycle across multi-region environments

Owning and hardening the security perimeter across cloud and network boundaries

Triaging and remediating findings from penetration tests and vulnerability scans in collaboration with external security partners

Creating and maintaining our delivery pipeline from developer machines to production, including automated security checkpoints, secrets scanning, and dependency auditing.

Supporting compliance initiatives (e.g. SOC 2, ISO 27001, NIST) through infrastructure controls, audit logging, and evidence collection

Optimizing network topology for the best possible connectivity, latency and throughput for end users