Cloud DevSecOps Engineer

What You'll Do:

• Integrate and automate security controls directly into CI/CD pipelines, ensuring continuous vulnerability scanning, code analysis, and secure software delivery.
• Design, implement, and maintain secure Infrastructure as Code across multiple environments, primarily focusing on Google Cloud (GCP).
• Drive compliance and continuous auditing, acting as the primary technical point of contact for automated and manual evidence collection for PCI-DSS and SOC 2.

Required Skills:

• 5+ years of experience in DevSecOps, Cloud Security, or DevOps with deep understanding of securing cloud-native infrastructure.
• Strong expertise with Kubernetes (GKE preferred) and container security practices, including Helm.
• Solid proficiency with Google Cloud (GCP) security architecture and native tools.

About Zact:

• Zact is redefining expense and payment management systems for organizations.
• Their mission is to align employee spending with finance and accounting teams while offering built-in controls and continuous reconciliation.
• As they expand internationally, they are looking for the right people to join them on this exciting journey.