DevSecOps Engineer

Location: Belgrade; Lisbon Workplace: OnSite Aghanim is an integrated commerce, liveops automation, community engagement, and payments platform for video games.   Mobile games have traditionally depended on app stores for distribution, payments, and player relationships. We believe there is a better way. Aghanim helps game studios build direct relationships with players, sell directly, and build their future on their own terms. Today, more than 100 games worldwide are already building this future with Aghanim.   Our team brings together people across Los Angeles, New York, Seoul, Beijing, London, Lisbon, Belgrade and other locations around the globe, with deep expertise in gaming, fintech and technology. We move quickly, keep communication direct, and focus on getting things done. We believe the best people thrive when they have autonomy, ownership, and a stake in the company's success. [https://app.ashbyhq.com/api/images/user-content/4f457f07-466b-477b-b552-fbbabd850111/2de3a7cd-8843-41a9-8bbe-ceb897a42c4a/Logo%20(horizontal).svg] We’re looking for a hands-on DevSecOps Engineer to build security into our cloud infrastructure and delivery pipelines. You’ll work closely with DevOps and development teams to establish practical security standards as our platform grows. KEY RESPONSIBILITIES - Own cloud security on GCP: IAM, org policies, network security, and edge protection with Cloudflare. - Harden our GKE clusters and container supply chain. - Build automated security checks into CI/CD (SAST, dependency, container, and IaC scanning). - Own secrets management and least-privilege access across the platform. - Drive vulnerability and cloud posture management to remediation. - Build security monitoring and lead incident response. - Actively drive SOC 2 Type 2 and PCI DSS Level 1 work: implement controls, prepare evidence. REQUIRED QUALIFICATIONS - 5+ years in DevSecOps, cloud security, or a security-heavy DevOps/Platform role. - Strong production experience with GCP (AWS/Azure acceptable). - Hands-on experience securing Kubernetes and Terraform-managed infrastructure. - Practical knowledge of CI/CD security, cloud IAM, secrets, vulnerability management, and security monitoring. - Ability to build security practices from scratch and get teams to adopt them. - Strong English communication skills. NICE TO HAVE - Experience with Cloudflare, Datadog, Wiz, Drata, or GitHub Actions. - Prior SOC 2 or PCI DSS audit experience. - Background in payments, gaming, or high-load products. WHY JOIN US - World-class team – work alongside experienced professionals from around the globe who have built products used by millions of players - High growth, high impact – be part of a fast-growing company where ideas turn into products and reach customers in days, not months - Autonomy and ownership – we trust people to make decisions, take initiative, and drive results - Modern tools and technology – use AI, automation, and modern tools as part of your everyday work - Equity – participate in the company's growth and long-term success