DevSecOps Engineer
Aghanim · Belgrade ·
- Work mode
- Onsite
- Employment
- Full time
- Category
- Security
- Experience
- 5+ years
Aghanim · Belgrade ·
Nexus Recruitment Group · Pasig, Metro Manila, Philippines
uberall · Brazil
activate-interactive-pte-ltd · Singapore, Singapore, Singapore
Lionhires · Anywhere
A hands-on DevSecOps Engineer in Belgrade who embeds security across Aghanim's game-commerce platform: owning GCP cloud security, hardening GKE clusters and container supply chains, automating security scanning in CI/CD, managing secrets and vulnerabilities, leading incident response, and driving SOC 2 and PCI DSS compliance. Core stack: GCP, Kubernetes, Terraform, Cloudflare.
Aghanim is an integrated commerce, liveops automation, community engagement, and payments platform for video games.
Mobile games have traditionally depended on app stores for distribution, payments, and player relationships. We believe there is a better way. Aghanim helps game studios build direct relationships with players, sell directly, and build their future on their own terms. Today, more than 100 games worldwide are already building this future with Aghanim.
Our team brings together people across Los Angeles, New York, Seoul, Beijing, London, Lisbon, Belgrade and other locations around the globe, with deep expertise in gaming, fintech and technology. We move quickly, keep communication direct, and focus on getting things done. We believe the best people thrive when they have autonomy, ownership, and a stake in the company's success.
We’re looking for a hands-on DevSecOps Engineer to build security into our cloud infrastructure and delivery pipelines. You’ll work closely with DevOps and development teams to establish practical security standards as our platform grows.
Own cloud security on GCP: IAM, org policies, network security, and edge protection with Cloudflare.
Harden our GKE clusters and container supply chain.
Build automated security checks into CI/CD (SAST, dependency, container, and IaC scanning).
Own secrets management and least-privilege access across the platform.
Drive vulnerability and cloud posture management to remediation.
Build security monitoring and lead incident response.
Actively drive SOC 2 Type 2 and PCI DSS Level 1 work: implement controls, prepare evidence.
5+ years in DevSecOps, cloud security, or a security-heavy DevOps/Platform role.
Strong production experience with GCP (AWS/Azure acceptable).
Hands-on experience securing Kubernetes and Terraform-managed infrastructure.
Practical knowledge of CI/CD security, cloud IAM, secrets, vulnerability management, and security monitoring.
Ability to build security practices from scratch and get teams to adopt them.
Strong English communication skills.
Experience with Cloudflare, Datadog, Wiz, Drata, or GitHub Actions.
Prior SOC 2 or PCI DSS audit experience.
Background in payments, gaming, or high-load products.
World-class team – work alongside experienced professionals from around the globe who have built products used by millions of players
High growth, high impact – be part of a fast-growing company where ideas turn into products and reach customers in days, not months
Autonomy and ownership – we trust people to make decisions, take initiative, and drive results
Modern tools and technology – use AI, automation, and modern tools as part of your everyday work
Equity – participate in the company's growth and long-term success
tsys · ALPHARETTA, GEORGIA