DevSecOps & Cloud Security Engineer

Core Responsibilities: Drive the "Shift-Left Security" strategy by seamlessly integrating automated security testing (SAST/DAST/SCA) into CI/CD pipelines, and collaborate with R&D teams to achieve closed-loop lifecycle management of security vulnerabilities. - Lead the security architecture design and daily operations of cloud-based infrastructure. Oversee core cloud security components and protection strategies such as WAF and IAM to ensure the stable operation of cloud assets and business operations. - Regularly lead penetration testing and risk assessments for cloud environments, web applications, and full-stack business processes to uncover potential logical flaws and deep-seated security vulnerabilities. - Build and continuously optimize the security monitoring and alerting matrix for cloud-native environments, efficiently respond to emergent security incidents, and conduct continuous Cloud Security Posture Management (CSPM). Requirements: Bachelor’s degree or above (Computer Science, Information Security, or related majors preferred), with 3-5 years of hands-on experience in implementing DevSecOps frameworks or large-scale cloud platform security operations. - In-depth understanding of agile development and CI/CD processes, proficiency in at least one programming language among Python, Go, or Shell, with the ability to independently develop security automation scripts and tools. - Proficient in cloud-native architecture, with a deep understanding of the AWS ecosystem and its core security component configurations, as well as solid capabilities in cloud compliance auditing and posture management. - Possess exceptional offense-defense mindset and practical skills, familiar with the OWASP Top 10 and common web vulnerability principles, and capable of proficiently using mainstream industry tools to conduct penetration tests and traffic analysis. Plus Factors: Hands-on experience in security hardening for containerization and cloud-native orchestration systems (Docker, Kubernetes). - Hold highly recognized professional security certifications (such as AWS Certified Security - Specialty, CISSP, CISA, OSCP, etc.). - Experience building a full-link DevSecOps system from 0 to 1 at a large internet enterprise, or experience in red-team/blue-team exercises or offensive-defensive drills in large cloud environments. Company Overview Davion Labs is currently inviting a Cloud Security & DevSecOps Engineer with deep technical expertise and practical experience to join the ApeX Protocol core team. ApeX Protocol is a leading decentralized exchange (DEX) platform dedicated to providing users with a smooth, efficient, and secure cryptocurrency trading experience. Focused on innovation and user empowerment, ApeX Protocol aims to redefine the decentralized trading landscape through its cutting-edge technology and comprehensive product portfolio. Latest Product: ApeX Omni (v2) offers multi-chain liquidity, flexible and user-centric design, and top-tier security backed by zero-knowledge proofs, allowing all users to enjoy a safer and more efficient trading experience. As a Cloud Security & DevSecOps Engineer, you will deeply participate in the full-lifecycle security construction of ApeX Protocol's underlying infrastructure and R&D pipelines. From security defense design for cloud-native architecture, automated security toolchain integration in CI/CD processes (such as SAST/DAST/SCA), to cloud environment penetration exercises and daily security operations, you will be responsible for continuously optimizing system security baselines. We look forward to your deep defense-in-depth philosophy, working closely with the R&D team to drive "Shift-Left Security" and provide a solid and reliable infrastructure foundation to support large-scale on-chain asset cloud architectures. Originally posted on Himalayas