DevOps Security Engineer

Job Description
• Design, deploy and support security controls, landing zones, security baselines and guardrails across multi-cloud environments.
• Engineer and secure cloud workloads, including virtual machines, containers, Kubernetes platforms, serverless services and cloud-native applications.
• Deploy and operate Cloud Workload Protection capabilities to strengthen workload visibility, protection and resilience.
• Embed security controls into CI/CD pipelines, Infrastructure as Code and cloud engineering processes.
• Develop policy-as-code, automated compliance validation and security orchestration capabilities.
• Automate cloud security monitoring, remediation, reporting and configuration management.
• Integrate cloud telemetry, workload events, audit logs and posture findings into security operations platforms.
• Deploy, manage and optimise Cloud Security Posture Management, Cloud Workload Protection and Cloud-Native Application Protection Platforms.
• Identify and support the remediation of cloud misconfigurations, workload vulnerabilities, excessive permissions and other security weaknesses.
• Integrate cloud security telemetry with SIEM, SOAR and security operations platforms, including Microsoft Sentinel and Google Security Operations.
• Develop integrations, APIs, playbooks, workflows and automated remediation solutions.

Qualifications
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
• 5+ years of hands-on cybersecurity experience across security engineering, cloud security, security operations or security architecture.
• 3+ years of hands-on cloud security engineering experience in enterprise-scale cloud environments.
• Strong understanding of cloud security architecture, networking, identity and access management, workload security and the shared-responsibility model.
• Experience designing, deploying and operating security controls across Google Cloud, Microsoft Azure and/or AWS, with strong expertise in at least one cloud platform.
• Experience implementing and supporting security technologies such as Microsoft Sentinel, Defender XDR, Defender for Cloud, Microsoft Entra ID, Wiz or equivalent platforms.
• Proven experience delivering security automation and orchestration using Infrastructure as Code and cloud-native services.
• Hands-on experience securing containers, Kubernetes platforms, serverless services and cloud-native applications.
• Experience deploying or supporting CSPM, CNAPP, CWP, vulnerability management and cloud security posture platforms.
• Strong proficiency in Terraform.
• Experience with PowerShell, Python, cloud CLIs, KQL, detection engineering and security automation technologies.
• Experience integrating cloud security telemetry into SIEM, SOAR and security operations platforms.
• Experience developing APIs, system integrations, workflows, playbooks and automated remediation solutions.
• Strong understanding of cloud, workload, container, Kubernetes, network, identity and endpoint security controls.
• Strong knowledge of threat detection, incident response, vulnerability management, attack-surface reduction and cloud security monitoring.
• Strong analytical, troubleshooting and communication skills in English.

Additional Information
• The chance to work in a top talent team
• Attractive remuneration
• Build knowledge in cutting-edge technologies
• Opportunity for continuous training, learning and certification
• Experience in an international and multicultural organization
• Work on challenging projects with clients in various industries around the globe
• Modern office environment
• Additional health insurance
• Life insurance
• 50+ benefits and services to choose from
• Hybrid working policy

KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!

© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.