DevSecOps Engineer

28Stone is one of just 4 capital markets companies in Latvia. But what really sets us apart is that all of our clients are in the US and UK. So we are operating on a truly global scale, building financial solutions for some of the most developed markets in the world.

We are an IT consulting company specializing in capital markets technology and financial infrastructure- basically, we help major financial institutions operate more efficiently by creating custom software solutions.

The capital markets space in Latvia is still pretty small, so working at 28Stone gives you a unique mix- you get to be part of a focused team, but also work on international projects that make a real impact.

We celebrate winning the Top 1% Workplace Awards 2024 in the “Best Workplace for Talent Investment” category and are always seeking to expand our team with positive, open-minded and motivated individuals who are eager learn as well as share what they know.

Why 28Stone

• Flexible work schedule and the possibility of working from home in Latvia or one of our offices (Riga, Daugavpils).
• Health insurance and mental wellness platform from Day 1: sport/dentist/vaccination/accident plans + massage chair in the office.
• Annual training budget.
• Technology communities: friendly and experienced team members who support your professional growth.
• Sports community: Squad Hour gym membership deal, 28Stone volleyball team, various public sports events, and monthly challenges.
• Social events: bi-weekly lunches, board game nights, team buildings, company-wide events.
• Loyalty rewards program: referral bonuses, gifts and merch on your work anniversary.
• Paid mobile phone bills.
• Additional one day of paid sick leave for emergency cases.
• Modern & ergonomic office space: all the resources and tools to perform your tasks.
• Additional perks in the office: free snacks, fruits, tea, coffee, board games, novuss table and Xbox.
  
  

Impact Zone

• Daily monitoring of DevSecOps tools to ensure regular application scanning as specified in security policies.
• Coordinate with teams to remediate vulnerabilities identified using tools such as Invicti, SonarQube, Sonatype, and Tenable.
• Create monthly security reports for management showing application vulnerabilities and remediation status with teams.
• Work closely with other teams to onboard and assist them in using our tools. In case of any issues with the tools that our team cannot resolve, escalate the issue to the vendor and coordinate support sessions until the issue is resolved.
• Ensure compliance with our security policies and ensure that teams have taken secure coding trainings as specified in security policies.
• Lead and oversee data encryption initiatives to ensure data security during rest and transit.
• Coordinate with relevant teams API vulnerabilities identified by Traceable AI.
• Coordinate the process of applications APIs are cataloged in Mulesoft, ensuring we have an up-to-date API inventory.
  
  

Qualifications & Experience

• Bachelor’s degree in computer science, Information Security, or a related field.
• At least 2 years of experience in DevSecOps, cybersecurity, or a related IT security role.
• Hands-on experience in vulnerability management and coordinating using at least one of the tools: Invicti (Previously Netsparker), SonarQube, Sonatype, Traceable AI or Tenable.
• Hands-on experience on data encryption projects, with a focus on securing data at rest and in transit.
• Experience in escalating and resolving technical issues with vendors.
• Excellent communication skills, capable of effectively coordinating with various teams.
• Strong written and verbal communication skills in English.
  
  

Compensation

Starting from a gross EUR 2500 - 3000.

We are flexible and use an individual approach with each candidate we meet, so we invite you to apply even if you do not meet some of the listed requirements.

Only candidates who have the right to work in Latvia are considered for this position.

The mentioned remuneration may vary depending on the candidate’s skills, qualifications, and experience.

Please read our Careers Privacy Statement found on our website.