DevSecOps Engineer

HeyBlu is a Romanian e-money licensed fintech company that aims to provide financial services to customers and merchants operating in the e-commerce space. Our vision is to increase the financial power of e-commerce buyers & sellers, making a positive impact in their everyday lives. We do this by extending the purchasing power of retail shoppers in easy and convenient ways, while also helping e-commerce merchants with the capital needed to grow their business.

Being part of eMAG group, the largest e-commerce player in Romania, HeyBlu is focusing on building a financial offering for customers and merchants operating within the eMAG ecosystem by implementing an “embedded finance” approach. As part of the global Prosus group, we share the same purpose: “Improving everyday life for billions of people through technology”. In the HeyBlu team we are building an entrepreneurial, results-driven, agile, and collaborative culture based on the core values we share across the group: ownership, accountability, innovation, adaptability and customer focus.

What you’ll have to do:

• Embed security practices across the entire software development lifecycle (SDLC) — from code review to production deployment;
• Integrate and maintain security tooling (SAST, DAST, SCA, secrets scanning) in CI/CD pipelines (GitLab CI);
• Design and enforce infrastructure security controls on cloud environments, with focus on NIS2 and DORA compliance;
• Manage vulnerability assessments, coordinate remediation with development teams, and track resolution SLAs;
• Own secrets management, access control policies, and identity governance across the platform;
• Build and maintain security monitoring, alerting and incident response playbooks (SIEM, log aggregation);
• Support and coordinate periodic security audits and penetration testing activities.

How we’d like you to be:

• With hands-on experience as a Developer, DevOps, DevSecOps, SRE or Security Engineer;
• With practical experience with cloud infrastructure (AWS / Azure / GCP) and Linux systems administration;
• With experience with containers and orchestration (Docker, Kubernetes) and CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins or similar);
• With solid knowledge of Infrastructure as Code (Terraform, CloudFormation) and automation;
• With strong security fundamentals: IAM, encryption, network security, secrets management (Vault, AWS Secrets Manager, KMS);
• With experience with monitoring, logging and alerting solutions; knowledge of HA, Disaster Recovery and Business Continuity concepts;
• With analytical mindset, proactive attitude and a strong drive for automation and continuous improvement;
• With advanced English; strong communication and cross-team collaboration skills; comfortable working in an Agile environment.

Curious to find out more about the next step in your career? Apply now and if your experience is relevant for the role you wish, we will give you a call for more details!