Senior DevSecOps Engineer

ABOUT CODEWAY

Codeway is a global consumer tech company with more than 400M users worldwide.
Since 2020, we’ve built and scaled 60+ mobile apps across creativity, productivity, wellness, language learning, and entertainment.

Our flagship apps — Retake AI, Cleanup, Learna, and DramaPops — and many of them lead their categories globally. In 2024, we became the most downloaded app publisher on iOS, driven by cutting-edge AI research, sharp data-driven execution, and a relentless focus on product and marketing.

We’re a team of 300+ people across İstanbul and Barcelona who bring curiosity, passion, trust, and ownership to everything we build. Recognized as a #1 LinkedIn Top Startup and a Great Place to Work in Europe, Codeway is where ambitious people do their life’s best work.

We’re building the next generation of consumer tech and reimagining what mobile apps can be.

This is Codeway. This is our way. Join us.

POSITION

We are seeking a skilled and motivated Senior DevSecOps Engineer to join our team. The successful candidate will be responsible for initiating security awareness in code development and deployment, as well as providing robust security solutions through various security-oriented tools. This role is crucial to maintaining the integrity, confidentiality, and availability of our applications and data across our extensive cloud infrastructure.

WHAT YOU'LL BE DOING

· Security Awareness & Training: Develop and implement security training programs for development and operations teams to promote best practices in secure coding and deployment.
· Security Policies & Procedures: Establish and enforce security policies, standards, and procedures that align with industry best practices and regulatory requirements.
· Vulnerability Management: Conduct regular security assessments, vulnerability scanning, and penetration testing to identify and mitigate security risks.
· Incident Response: Lead and coordinate response to security incidents, ensuring quick resolution and thorough investigation to prevent recurrence.
· Cloud Security Architecture: Design and implement secure cloud architectures, including network security, identity and access management, and data protection strategies.
· DevSecOps Integration: Integrate security tools and practices into CI/CD pipelines to automate security testing and ensure secure code deployment.
· Monitoring & Logging: Set up and maintain security monitoring and logging solutions to detect and respond to potential security threats in real-time.
· Compliance: Ensure compliance with relevant legal and regulatory requirements, such as GDPR, and others applicable to Codeway’s operations.
· Collaboration: Work closely with DevOps, product teams, and other stakeholders to embed security into every stage of the software development lifecycle.

WHAT YOU'LL BRING

· Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
· Minimum 5-8 years of experience in cloud security engineering or a related role.
· Proven experience with public cloud platforms (Google Cloud, AWS).
· Strong understanding of Kubernetes security.
· Demonstrated experience in mobile application security, including securing mobile APIs, OWASP Mobile Top 10 risks, and mobile secure development practices.
· Familiarity with security tools and platforms (e.g., SIEM, IDS/IPS, vulnerability scanners), with the ability to support their integration and follow up on findings in collaboration with relevant teams.
· Certifications (Nice to have): Relevant certifications such as CISSP, CISM, CEH, or cloud-specific certifications like AWS Certified Security - Specialty, Google Professional Cloud Security Engineer.
· Proficiency in scripting and automation (e.g., Python, Bash).
· Deep understanding of network security, encryption, and key management.
· Familiarity with DevSecOps practices and tools (e.g., Jenkins, GitLab CI, Terraform).
· Excellent problem-solving and analytical skills.
· Strong communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
· Proactive and self-motivated with a strong sense of ownership and accountability.

Nice to Have

· Experience in AI and machine learning security.
· Knowledge of data privacy regulations and best practices.
· Experience with home-grown data analytics platforms.

WHAT'S IN IT FOR YOU

· Great Place to Work. As our top team member, you'll be a part of a fast-growing startup and have the privilege to enjoy our accredited “BEST WORKPLACES” environment, ranked first among all workplaces.
· A Competitive Compensation Package. Long story short, we take care of you.
· A Meal Compensation that is actually enough for a decent & nutritious lunch, we’re not following the industry standard.
· Full Health Benefits. To keep you away from all the trouble, we provide unlimited private health insurance and cover the HPV vaccine.
· Pet Adoption Support. We cover the primary healthcare expenses, parasite vaccinations, and microchip costs that may arise within the first year after employees adopt a pet.
· Cool Tech Stack. Macbook, iPhone 15 Pro, magic mouse, magic keyboard; an adjustable desk with a 4K screen and any other gadget you may need in your job.
· Sport Activities Support. We care about your physical wellbeing and support your gym membership.
· Learning Never Ends! Training budget to help you grow in your role, gain new skills, and learn new things!
· Udemy Free Pass. An unlimited Udemy subscription.
· Flexible Schedule & Unlimited Vacations. This isn’t a “clock in, clock out” company. We care about your productivity, not tracking every minute you’re on site. It’s up to you to always be responsible with your work, no matter where you are or what schedule you’re keeping.
· English Course Support. Be more global and perform best at your work.
· Comprehensive Well-being Support. Through our partnership with Meditopia, we now offer free psychological counseling, along with additional services like dietitian, personal trainer, parenting consultant, physiotherapist, child & adolescent therapist, and face-to-face counseling for employees in Istanbul.
· A Top-Notch Office. Located at the heart of Istanbul, right next to Levent Metro Station at Ferko Signature.
· Codebrew. Yes, you’ve heard it right: We love coffee so much that we’ve built our own coffee shop inside our office, where we also provide healthy snacks at certain hours.
· Free Breakfast. At Codebrew - every morning at 9:30 AM.
· No Dress Code. Dress as you like.
· Happy Hours Every Friday. Every. Single. Friday. When it’s 5 PM: Screens off, party on! (Check out Codeway on Instagram)
· Dream Team. Average Codeway member is young, talented, and passionate - which makes our working environment extremely dynamic. Need proof? Take a look at our Instagram.
· Gaming Area. Whenever you need to take a break from hard work and relax with your favorite games, our PS5 corner will be waiting for you.
· Software Support. Subscription to any software you might need to perform at your best.
· Public Transportation Support. Daily public transportation support is on us, covered by an additional monthly compensation.
· Parent Support. Becoming a parent is a big moment, and Codeway celebrates it with you. We offer a one-time grant to support our new parents.
· Massage Room. When you need a moment to recharge and unwind, our massage chair room will be ready to offer you a relaxing break.

THE RECRUITING PROCESS

Application → Case Study → Recruiter Interview → Hiring Manager Interview → Final Executive Interview→ Offer

Your personal data that will be collected through your applications made due to this advertisement will be processed automatically by the data controller Codeway in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and relevant legislation for the purpose of conducting job application processes. You can access detailed information on this matter from the "Candidate Information Notice"page at https://www.codeway.co. Codeway processes the personal data of job applicants in accordance with relevant legislation. "Privacy Notice for Employee Candidate" summarizes the data processing procedures during the application process.

Bu ilan sebebiyle yapacağınız başvurular aracılığıyla toplanacak kişisel verileriniz veri sorumlusu Codeway tarafından 6698 sayılı Kişisel Verilerin Korunması Kanunu (“KVKK”) ve ilgili mevzuat kapsamında iş başvuru süreçlerinin yürütülmesi amacıyla otomatik yollarla işlenecektir. Detaylı bilgiye https://www.codeway.co adresindeki "Aday Aydınlatma Metnimizin" sayfasından ulaşabilirsiniz. Codeway, iş başvurusu yapan adayların kişisel verilerini, ilgili mevzuat çerçevesinde işlemektedir. "Çalışan Adayı İçin Gizlilik Bildirimi"başvuru sürecindeki veri işleme süreçlerini özetler.