DevSecOps / Security Engineer at Zeely

Job description

Join Zeely as a DevSecOps / Security Engineer and help us protect our products, infrastructure, and data as we scale. This is a hands-on role: you’ll secure our AWS infrastructure, build security into CI/CD, find and fix vulnerabilities, respond to incidents, and contribute to our SOC 2 and ISO 27001 compliance. You’ll work closely with our Principal System Architect, engineering, DevOps, and Platform teams, as well as external security partners, and help shape our security function as we grow. About Us: Zeely is the agentic AI platform for creating, launching, and scaling paid ads. Simply put: we've made the best AI solutions and marketing tools available to small and medium businesses — tools that used to be reserved for big brands with expensive marketing teams. The next big step: a B2B solution for large marketing teams and enterprise clients — workflows, creative analytics, and full control over campaigns across the whole team. For companies where performance marketing already runs at scale and needs more efficiency and automation. A few numbers that speak for themselves: - 4 years on the market — a stable, profitable company backed by international investors; - 6× growth over the past year; - 2,000,000+ businesses already use Zeely; - #1 in its category in the US market; - 250+ specialists on the team; - Markets: US + worldwide. We’re not a startup searching for product-market fit — we’re a business with proven results and a clear understanding of what works. What You’ll Do: - Secure our AWS-first cloud environment hands-on: IAM and access management, secrets, hardening, and network security; - Build and maintain security checks in CI/CD: SAST, DAST, SCA, secrets scanning, and infrastructure-as-code checks; - Find, prioritize, and fix vulnerabilities across our product and cloud infrastructure, from investigation to fix in code or infrastructure; - Respond to security incidents and set up monitoring and alerting; - Close security tickets end to end, working with the DevOps and Platform teams; - Review code and infrastructure changes from a security perspective; - Implement security controls and prepare evidence for SOC 2 and ISO 27001 audits. What Do You Need to Join Us? - 5+ years of experience in DevOps, Platform, or infrastructure engineering, including at least 3 years focused on security (DevSecOps, Cloud Security, or Security Engineer); - Ability to work fully independently and own tasks end to end; - Strong hands-on experience with AWS and infrastructure as code using Terraform; - Hands-on experience finding and fixing vulnerabilities (OWASP Top 10, cloud misconfigurations, dependency issues) and handling security incidents; - Significant involvement in preparing for, passing, or maintaining SOC 2 and/or ISO 27001 — you understand the requirements behind each control and have worked with auditors; - Upper-Intermediate (B2+) English or higher; - Fluent Ukrainian. Nice to Have: - Backend development background (Node.js / TypeScript, Java, C#/.NET, Go, or Python), or a career path from backend to DevOps/Platform to Security; - AWS certifications (Security Specialty, Solutions Architect Professional, or DevOps Engineer Professional) or other security certifications (OSCP, CKS, Security+); - Experience with HIPAA, PCI DSS, or CASA; - Understanding of GDPR and/or CCPA (CPRA) requirements. Why It's Worth Joining Us: - A hands-on security role at one of the world’s leading AI companies: Zeely is #22 in a16z’s Top 50 consumer AI apps by monthly revenue; - Security is a strategic priority for the company, with full support from leadership and room to influence how things are built; - Work with cutting-edge technologies and AI-powered tools; - A strong team of A-level players who push each other to grow; - A remote-first setup with offices in Warsaw and Kyiv; - Regular performance reviews to keep your growth transparent and rewarded. Recruitment Process: Intro Call → Technical Interview → Final Interview → Reference Check → Offer. Send us your CV — we'd love to meet you!

Requirements

Must-haves

Join Zeely as a DevSecOps / Security Engineer and help us protect our products, infrastructure, and data as we scale.
4 years on the market — a stable, profitable company backed by international investors;
6× growth over the past year;
2,000,000+ businesses already use Zeely;
#1 in its category in the US market;
250+ specialists on the team;
Markets: US + worldwide.
We’re not a startup searching for product-market fit — we’re a business with proven results and a clear understanding of what works.
Secure our AWS-first cloud environment hands-on: IAM and access management, secrets, hardening, and network security;
Build and maintain security checks in CI/CD: SAST, DAST, SCA, secrets scanning, and infrastructure-as-code checks;
Find, prioritize, and fix vulnerabilities across our product and cloud infrastructure, from investigation to fix in code or infrastructure;
Respond to security incidents and set up monitoring and alerting;
Close security tickets end to end, working with the DevOps and Platform teams;
Review code and infrastructure changes from a security perspective;
Implement security controls and prepare evidence for SOC 2 and ISO 27001 audits.
What Do You Need to Join Us?
5+ years of experience in DevOps, Platform, or infrastructure engineering, including at least 3 years focused on security (DevSecOps, Cloud Security, or Security Engineer);
Ability to work fully independently and own tasks end to end;
Strong hands-on experience with AWS and infrastructure as code using Terraform;
Hands-on experience finding and fixing vulnerabilities (OWASP Top 10, cloud misconfigurations, dependency issues) and handling security incidents;

Nice-to-haves

Backend development background (Node.js / TypeScript, Java, C#/.NET, Go, or Python), or a career path from backend to DevOps/Platform to Security;
AWS certifications (Security Specialty, Solutions Architect Professional, or DevOps Engineer Professional) or other security certifications (OSCP, CKS, Security+);
Experience with HIPAA, PCI DSS, or CASA;
Understanding of GDPR and/or CCPA (CPRA) requirements.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdainode.jstypescriptjavagopython

Platform: ashby
Effort: quick