About the job
Who We Are at Yapily
Our Mission: Transforming the way the world engages with value.
Our Vision: A seamless world of financial transactions.
Our Purpose: To empower everyone to access and transfer value.
At Yapily, we are developing a robust, scalable, and secure open banking ecosystem that is redefining global value interaction.
Our platform supports prominent organizations like Adyen, Intuit QuickBooks, and Google, offering services such as payment initiation, bank data access, and ready-to-use products that empower businesses to innovate rapidly and expand the possibilities of financial technology.
As pioneers in open banking, we are committed to shaping the future of this dynamic industry through unmatched expertise and an unwavering dedication to innovation.
Join Us as a Senior DevSecOps Engineer
In this pivotal role, you will play a crucial part in embedding security throughout our Software Development Lifecycle (SDLC). You will be part of a high-impact team tasked with securing our highly available, multi-tenant platform primarily hosted on GCP and Kubernetes.
We are looking for a proactive, automation-driven security approach. Your responsibility will be to establish a solid security foundation, automate compliance checks, and ensure we surpass the security standards required in regulated financial services.
Your Responsibilities
- Manage Security Tooling: Select, integrate, and maintain security tools within our environments and CI/CD pipelines.
- Establish Security Guardrails: Design, implement, and enforce automated security policies across our cloud estate and CI/CD processes.
- Focus on GCP Security: Enhance and secure our Google Cloud Platform environment, including IAM policies, network security, and resource configuration.
- Automate Compliance: Collaborate with compliance and governance teams to translate requirements into automated, verifiable infrastructure and deployment practices.
- Oversee Vulnerability & Patch Management: Automate and manage the complete process for identifying and addressing security vulnerabilities within infrastructure, applications, and third-party dependencies.
- Empower Developers: Create and maintain

