Senior DevSecOps Engineer

📋 Job Overview

monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition. We fully embrace the AI revolution and we equip you with AI-powered IDEs, customizable agent rules, prompt engineering tools to streamline your workflow and AI-infused CI/CD pipelines designed to boost speed and reliability. You'll also tap into AI-driven insights, helping you make smarter decisions, faster. We’re looking for a Senior DevSecOps Engineer to join our team, where you’ll have the chance to grow your career while solving impactful, high-scale problems. This role is centered on securing our cloud infrastructure, with a strong focus on Kubernetes, in close collaboration with the broader Security department.

🏢 About monday.com

monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition. We fully embrace the AI revolution and we equip you with AI-powered IDEs, customizable agent rules, prompt engineering tools to streamline your workflow and AI-infused CI/CD pipelines designed to boost speed and reliability. You'll also tap into AI-driven insights, helping you make smarter decisions, faster.

🎯 The Role

The role is centered on securing our cloud infrastructure, with a strong focus on Kubernetes, in close collaboration with the broader Security department. The ideal candidate will play a crucial role in managing our Cloud Security Posture using CNAPP/CSPM tools such as Wiz, and in hardening our cloud-native environments, while also supporting our AppSec team in securing CI/CD pipelines. The role also involves managing Web Application Firewalls in collaboration with our Advanced Threat Detection team, participating in security incident response, conducting infrastructure audits, and managing our Just-In-Time (JIT) access system. A person in this role will be part of the team serving as a key point of communication and synchronization between the several groups of stakeholders (Infrastructure, Development, Security), fostering a culture of security awareness and collaboration across all teams.

✅ Key Responsibilities

• Manage our Cloud Security Posture using CNAPP/CSPM tools such as Wiz, AWS GuardDuty, and DataDog.
• Harden and continuously monitor our cloud-native environments, with particular focus on Kubernetes.
• Manage security cloud configuration with tools like Terraform and CDK.
• Collaborate with cloud operations teams to identify and remediate security risks.
• Configure and manage WAFs (such as Cloudflare) in collaboration with our Advanced Threat Detection team.
• Monitor and update WAF rules to respond to new vulnerabilities and attack vectors.
• Conduct regular security assessments and audits of WAF configurations.
• Participate in security incident response.
• Conduct regular infrastructure security audits.
• Identify and remediate security threats, collaborating with other teams to mitigate risks.
• Manage our Just-In-Time (JIT) access system.
• Manage dozens of cloud accounts and design access roles (IAM) across the organization.
• Ensure secure access to resources such as Kubernetes clusters, databases, cloud resources, and virtual machines.
• Develop security tools within the organization's internal developer platform (IDP).
• Test and run PoCs of new security tools to increase efficiency and foster a Secure by Design culture.
• Provide support to our AppSec team in securing CI/CD pipelines.

📌 Required Qualifications

• At least 5 years of experience as a Software Engineer and a minimum of 3 years as a DevOps Engineer.
• Passion for keeping systems secure.
• Proficiency in any of languages Python/Go/Typescript.
• Experience with Kubernetes.
• Strong understanding of operating systems and networking.
• Understanding of IAM and access management concepts (e.g. Just-In-Time access, role design).
• Excellent problem-solving and communication skills.

⭐ Desirable Experience

• Experience with cloud security tools such as Wiz, AWS GuardDuty, DataDog, or similar CNAPP/CSPM platforms.
• Experience with configuring and managing Web Application Firewalls (WAFs) such as AWS WAF, Cloudflare, or similar.

🎁 Benefits

At monday.com, our total compensation package includes:

• Base salary
• Bonus target
• Restricted Stock Units (RSUs)

The total target monthly compensation for this role ranges from 44,000 PLN to 54,000 PLN. The total compensation package shown here reflects the current monday.com stock price and may change over time as the stock price varies. The target bonus and RSU grant are discretionary, depend on individual and company performance, and are subject to Board approval and the company’s equity plan, in line with monday.com’s bonus policy as updated from time to time. The benefits listed reflect programs currently offered in Poland; availability and terms may vary depending on the role, contract type, and company policy.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.