Job Opportunities API

Hello. We’re Teya. Teya was founded on a simple belief: local businesses deserve better. They are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving. Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business. Teya exists to change that. We’re building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support. Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work. We move fast. We care about quality. We stay close to the detail. And we believe great performance and genuine hospitality should go hand in hand. If you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we’d love to hear from you YOUR MISSION As a Senior DevSecOps Engineer (Security Tooling & Enablement), you will be responsible for embedding automated security controls and guardrails into our CI/CD pipelines, cloud platforms, and developer workflows. You’ll build and operate internal security tooling and integrations that enable secure delivery at scale—focusing on automation, low-friction developer experience, and high-quality security feedback loops. You will partner closely with platform, cloud, AppSec, and SecOps teams to deliver scalable, reliable, and friction-reducing security capabilities across the engineering organisation. RESPONSIBILITIES Security in CI/CD & Delivery Workflows - Integrate and maintain security checks (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines. - Provide fast, actionable, low-noise feedback to developers. - Embed infrastructure and application scanning into automated deployments. Security Tooling & Platform Engineering - Design, build, and operate internal security services, APIs, CLIs, and automation workflows. - Apply strong software engineering practices to security tooling (testing, observability, version control). - Treat security tooling as a product with clear documentation and support. Policy-as-Code & Guardrails - Implement and maintain policy-as-code guardrails for IaC, Kubernetes manifests, cloud accounts and identity configurations. - Work with platform teams to define secure defaults and self-service patterns. Platform Security & Detection Pipelines - Support vulnerability scanning platforms and security telemetry pipelines. - Ensure high-quality structured security data flows to SIEM/log platforms. - Enable automated response actions via integrations and runbooks. DevSecOps Culture & Enablement - Champion secure engineering practices and a shared responsibility mindset. - Drive enablement activities (office hours, guides, training) to improve adoption of secure patterns. - Contribute to blameless post-incident reviews and continuous improvement. Automation, AI & Operational Metrics - Leverage automation and AI to reduce manual toil and enrich security findings. - Define and track metrics such as time-to-feedback, signal-to-noise, and tooling adoption. REQUIREMENTS - 5+ years in security engineering, DevSecOps, or platform engineering with significant security integration experience. - Hands-on experience embedding security into CI/CD (SAST/DAST/SCA, container scanning, secrets detection). - Proficiency with CI/CD platforms (e.g., GitHub Actions, GitLab CI, Jenkins) and IaC (e.g., Terraform). - Strong software engineering and automation skills (Python, Go, Bash, or similar). - Deep cloud-native experience (AWS preferred), including IAM, networking, and logging. - Experience designing and implementing policy-as-code and security guardrails. - Ability to collaborate cross-functionally, balancing security with delivery velocity. Nice-to-Haves - Experience in f