Senior DevSecOps Engineer - Berlin / Lisbon / Warsaw

1GLOBAL is a technology-driven global mobile communications provider, delivering global connectivity solutions to enterprises and consumers. It owns and operates a global mobile core network in 15 countries and provides fully regulated telecommunications services across 43 countries worldwide. The company serves global banks, multinational enterprises, retailers, neo-banks, FMCG companies, travel leaders, and payment service providers, connecting over 80 million people and devices globally. Founded in 2022, 1GLOBAL is headquartered in the Netherlands with R&D hubs in Lisbon, Berlin, and São Paulo, employing around 550 experts across 16 countries.

• Minimum 3+ years of experience with Cloud Security, DevSecOps, or Infrastructure Security
• Strong AWS security fundamentals including IAM, KMS, GuardDuty, Config, Security Hub
• Solid Linux security and cloud networking fundamentals
• Hands-on Kubernetes security experience with RBAC, NetworkPolicies, pod security, and image scanning
• Experience with Infrastructure as Code tools such as Terraform and Git-based workflows
• Scripting skills for automation in Python, Go, or Bash
• Experience with vulnerability management and container security
• Security-first mindset with strong troubleshooting skills
• Experience with WAFs and cloud DDoS protection
• Comfortable with packet inspection, flow analysis, and traffic monitoring using tools like tcpdump, Wireshark, Suricata

• Design, implement, and evolve scalable cloud security controls across AWS multi-account environments using security-as-code principles
• Own Kubernetes security architecture including workload isolation, RBAC, pod security standards, and network segmentation
• Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement
• Continuously assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats
• Design and maintain strong IAM and secrets management practices, enforcing least-privilege access
• Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design
• Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection
• Ensure alignment with internal security policies and external frameworks such as CIS, NIST, ISO 27001
• Produce and maintain clear documentation including security architectures, runbooks, and incident response playbooks
• Act as a security champion, promoting best practices, awareness, and secure engineering culture across teams

Relocation is required if the candidate is not currently based in Berlin, Lisbon, or Warsaw.