Senior DevSecOps Engineer
16 days ago
Pontevedra
Senior DevSecOps Engineers, Ledn is interested in hearing from you! Ledn is a global financial services company built for digital assets, helping to improve the everyday lives of Bitcoin holders while building generational wealth for the future. We offer a suite of egalitarian lending, savings and trading products to digital asset holders in over 120 countries around the world. Through our products & services, we can make a difference in the lives and futures of our clients - in real terms. Our team at Ledn is a passionate group of individuals from diverse backgrounds. What we all have in common is an unshakeable conviction that digital assets can democratize access to the global economy and Ledn’s suite of products & services can play a critical role in doing so. The core values that guide us are: act with integrity always, own it, have a passion for progress, and lead with empathy. Combining these values with our conviction make Ledn an unstoppable force in changing the world for the better. Come join us as we build, innovate and revolutionize financial services! The Opportunity As a full-time Senior DevSecOps Engineer, you will be a hands-on, high-ownership individual contributor responsible for improving the security, reliability, and delivery velocity of Ledn’s cloud platform. You’ll bring a security-first mindset to everything you build — hardening infrastructure, strengthening CI/CD pipelines, improving observability, and enabling engineering teams to ship safely and independently. In Ledn’s Spain entity, this role also carries regulatory responsibility: you will own the availability, performance, and day-to-day operation of the entity’s ICT assets and applications, implement first-line security controls, and support compliance with MiCA and DORA ICT risk-management and operations requirements. This is a role for someone who doesn’t wait to be told what needs fixing. You’ll identify gaps before they become incidents, propose solutions before they’re requested, and follow through from design to implementation to measurement. You’ll also leverage AI-driven tools and practices to accelerate your own effectiveness and that of the broader engineering organization. You’ll work within a small, high-impact DevOps & Infrastructure team that operates as a platform and enabling team — our mission is to make the secure, reliable path the easiest path for every engineering Pod. About the Role • Platform Reliability & Operations (primary focus) Ship, scale, and harden our AWS/Kubernetes infrastructure. Build automation that eliminates toil, improve observability, and lead incident response — from detection to postmortem to action item closure. - CI/CD & Developer Enablement (primary focus) Own our pipelines end-to-end. Build golden-path templates that let engineering Pods ship safely and independently. Improve pipeline speed and reliability so DevOps intervention becomes the exception, not the rule. - Security Engineering (primary focus) Harden Kubernetes, AWS, and CI/CD with practical, measurable controls — policy-as-code, SAST/DAST, container and IaC scanning, secrets management, and least-privilege access. Build security in, don't bolt it on. - AI-Augmented Engineering (primary focus) You actively use AI tools (Copilot, Cursor, Claude, or similar) to accelerate your work — IaC generation, log analysis, incident triage. You're curious about applying them further and can do so with a security-aware mindset. - ICT Designate— Spain Entity (secondary mandate) In addition to your global role, you'll formally serve as the ICT responsible for Ledn's Spanish entity under MiCA. This means maintaining the DORA Register of Information, supporting ICT third-party oversight, and providing periodic compliance reporting — in coordination with the global team. The regulatory lift is real but bounded; the global DevOps mission is where you'll spend most of your time. What You Bring • 5+ years DevOps/SRE/Platform Engineering with hands-on production ownership - 2+ years of meaningful DevSecOps or Security Engineering scope - Full ownership of your work from problem identification through delivery and measurement — don't wait for tickets to be assigned. - Strong AWS expertise in multi-account environments (IAM, networking, compute, observability) - Kubernetes operations and hardening (EKS, Helm, pod security, admission control) - CI/CD platform ownership (GitHub Actions, CircleCI, ArgoCD, or similar) - IaC proficiency (Terraform, CDK, Pulumi, or CloudFormation) - Observability stack experience (OpenTelemetry, Prometheus, Grafana, ELK, or similar) - Policy-as-code tools (Kyverno, OPA/Gatekeeper, or Sentinel) - Scripting ability in Go, Python, Bash, or JavaScript - Working knowledge of DORA ICT operations and risk management - Fintech or regulated environment experience (SOC 2, ISO 27001, or similar) - Fluent in English and Spanish Nice to Have • Experience with observability platforms built on OpenTelemetry, VictoriaMetrics, VictoriaLogs, or Tempo. - Experience with AWS API Gateway, AWS Lambda and serverless frameworks like AWS SAM, Serverless. - Experience building internal developer platforms or contributing to developer self-service tooling (Backstage, service catalogs). - Exposure to AI/ML operations tooling, LLM integrations, or MCP (Model Context Protocol) workflows. Culture Fit: We’re looking for more than just operational excellence — we want an individual who thrives in a startup, tech environment and embodies our values. The ideal candidate will: • Have a passion for progress by being adaptable and resilient, and is comfortable navigating ambiguity in a high-growth, fast-paced environment. - Have a builder’s mindset, excited to create, iterate, and scale. - Be a collaborative partner, able to influence across functions and cultures with empathy and clarity. - Demonstrate integrity and accountability, especially in managing confidential information across multiple teams. A Taste of What We Provide: • As one of the world’s leading digital asset businesses, we provide tremendous growth opportunities. - Comprehensive, best-in-class total rewards package that starts on your first day! - We offer a competitive PTO package that ensures you have the time off you deserve. - Ownership in the business. Through shared equity, Ledn staff are stakeholders in the business and the future of the digital economy. - We offer every staff member the opportunity to work remotely anywhere in the world for 180 days (subject to restrictions). - A career that provides you with purpose in your job. We remove barriers so you love what you do. We are an equal opportunity employment organization and pride ourselves on inclusivity, diversity, and the success that comes from diversity. You may reach out to the Ledn team by emailing for reasonable accommodation requests throughout all stages of the recruitment process. Requests will be addressed confidentially. Ledn Working Environment: Our Ledn team is truly global in nature with our people spanning across North America, Latin America, South Africa and Europe. We are a remote first environment. Please note, due to the high volume of applications, only those applicants that qualify will be contacted. No agencies or recruiters please. We do not accept unsolicited agency resumes and we are not responsible for any fees related to unsolicited resumes.
