Job Information
Employee Type: Full Time – Office
Job Type: Cloud Security & DevSecOps Engineer
Industry: Information Technology & Services
Cloud Security & DevSecOps Engineer
We’re looking for a teammate to strengthen our technology team and take ownership of application security, cloud infrastructure and DevSecOps processes.
We don’t just want someone who finds vulnerabilities. We want someone who analyzes risks, builds solutions, improves our infrastructure and makes security a natural part of the software development process.
Onkatec is an AWS Advanced Tier Services Partner and won the AWS Consulting Partner of the Year – Turkey award at the 2026 Regional AWS Partner Awards. We deliver end-to-end technology solutions for businesses across Cloud, DevOps, Migration & Modernization, Security and Generative AI.
Responsibilities
- Run regular security checks on web applications, APIs and cloud infrastructure.
- Perform vulnerability scans and authorized penetration tests when needed.
- Prioritize the vulnerabilities you find and work with the development team to get them fixed.
- Improve the security and configuration of our cloud infrastructure, AWS first and foremost.
- Integrate automated security checks (SAST, DAST, SCA) into CI/CD pipelines.
- Manage security processes across Docker, Kubernetes and Linux environments.
- Build out logging, monitoring, alerting and security incident response.
- Standardize security processes and automate them as much as possible.
What We’re Looking For
- Experience with Linux, networking and system security.
- Hands-on knowledge of AWS or a similar cloud platform.
- A strong command of web and API security and the OWASP Top 10.
- Experience with Burp Suite, OWASP ZAP, Nessus, Nmap, Trivy or similar tools.
- Familiarity with Docker, Kubernetes, Git and CI/CD processes.
- Knowledge of IAM, WAF, network security and secrets management.
- The ability to solve security problems, not just report them.
What Kind of Teammate Are We Looking For?
- Takes ownership and follows work through
- Spots risks and acts on them without waiting to be told
- Works closely and smoothly with the development team
- Enjoys researching, learning and improving processes
- Strikes the right balance between security and development speed
Our goal isn’t just to run security tests; it’s to build secure, sustainable and scalable systems.
If this role sounds like a fit, we look forward to your application.
