DevSecOps

Mayflower is a technology company that alters the entertainment industry to a new level of perception and engagement.

We are building the future of live entertainment. We believe that by providing people with the best and high-quality live streaming experience in entertainment, we can better tackle the world’s “problems” together!

We're looking for a DevSecOps specialist to join our team and collaborate on continuously evolving our security architecture. You'll work closely with engineering and operations to strengthen our end-to-end security posture—protecting infrastructure, applications, and data—while enabling fast, reliable delivery.

Job Responsibilities

• Responsible for developing and maintaining the organization’s security architecture design to ensure the protection of IT systems, network infrastructure, and information assets.
• Implement security initiatives to assess and mitigate risks, ensuring alignment with business objectives and compliance with regulatory requirements.
• Collaborate with IT and business units to integrate security practices into the development and deployment of IT systems and applications.
• Conduct research on emerging security technologies and trends to enhance the organization’s security posture.

Job Requirements

• Proficiency in Ansible and Terraform for Infrastructure-as-Code (IaC).
• Solid knowledge of cloud security frameworks.
• Knowledge of threat intelligence platforms and techniques for monitoring and responding to potential security breaches.
• Proficiency in encryption technologies, PKI, and cryptographic protocols (SSL/TLS, IPSec).
• Understanding of network security, including firewalls, VPNs, IDS/IPS, and endpoint security solutions.
• Understanding of identity and access management (IAM) solutions, including SSO, MFA, and RBAC policies.
• Effective communication: Ability to convey complex security concepts in an accessible manner.
• Emotional intelligence (EQ): Fostering empathy and understanding in all interactions.
• Commitment to greatness: A results-driven mindset with a focus on excellence.
• Human-centricity: Ensuring solutions benefit both people and systems.
• Analytical thinking: Strong problem-solving and decision-making skills.
• Flexibility: Adaptable to changing priorities and challenges.
• Conflict management skills: Skilled in resolving disputes constructively and efficiently.
• Interdependence: A team player who thrives in collaborative environments.

Qualifications That Can Be a Plus

• SIEM, Cloudflare, K8s, ELK.
• Any IT/DevOps/Security certifications.
• Knowledge of modern DevSecOps practices.
• Expertise in scripting or programming languages such as Python, Go, Bash.
• Experience with security risk assessment frameworks, such as NIST, ISO 27001, or CIS.
• Hands-on experience with endpoint protection and configuration solutions (MDM, MAM).
• Hands-on experience with vulnerability scanning and penetration testing tools, such as Nessus, Qualys, or Metasploit.
• Knowledge of compliance standards (e.g., GDPR, HIPAA, PCI DSS) and their implications on IT security practices.