Senior Software Engineer (DevSecOps)

monday.com is a leading AI work platform with over $1B in ARR and 250,000+ customers globally, offering tools that automate and scale work processes. The Warsaw office, established in 2022, is a growing hub for engineers tackling impactful challenges and building products with AI-powered tools, CI/CD pipelines, and cloud security. The company emphasizes security integration in software development lifecycle and fosters collaboration among infrastructure, development, and security teams.

• Minimum 5 years of experience in DevOps/DevSecOps or related roles.
• Passion for maintaining system security.
• Proficiency in at least one programming language: Python, Go, or TypeScript.
• Experience with Kubernetes.
• Strong understanding of operating systems and networking.
• Expertise in Shift Left/Secure by Design methodologies in CI/CD using SAST/DAST tools like SonarQube, Dependabot, and Wiz.
• Experience configuring and managing Web Application Firewalls (WAFs) such as AWS WAF and Cloudflare.
• Excellent problem-solving and communication skills.

Securing CI/CD Pipelines:

• Implement and manage security controls for CI/CD pipelines.
• Automate security testing and vulnerability management using tools like Terraform.
• Collaborate with development teams to integrate security best practices.

Working with WAFs:

• Configure and manage Web Application Firewalls such as Cloudflare and AWS WAF.
• Monitor and update WAF rules to address vulnerabilities.
• Conduct regular security assessments and audits of WAF configurations.

Cloud Security Posture Management:

• Develop and apply cloud security best practices and policies.
• Monitor cloud environments using tools like AWS Guard Duty, Wiz, Orca, DataDog.
• Collaborate with cloud operations teams to remediate security risks.

Implementing Security Self Service:

• Develop security tools within the organization's IDP.
• Test and perform PoC of new security tools to enhance development security.
• Promote Secure by Design principles.