Sumsub is a leading full-cycle verification platform that enables scalable compliance. From identity and business verification to ongoing monitoring, our platform adapts to different risk appetites and market demands, ensuring global compliance. It allows customizing analytics and workflows with a no-code interface.

Over 4,000 clients — including Bitpanda, Wirex, Avis, Bybit, Vodafone, Duolingo, Kaizen Gaming, and TransferGo — trust Sumsub to accelerate growth, prevent fraud, and maintain compliance worldwide.

Now we are looking for a Infrastructure Security Engineer to design, build, and operate security controls as reliable internal services . This role focuses on infrastructure, CI/CD, and cloud security.

You will work closely with Infrastructure, Platform, and Engineering teams to make unsafe behavior harder, noisier, and measurable — without blocking delivery.

This is an engineering-driven role with long-term ownership of security capabilities

What You Will Be Doing:

• Design and implement security controls integrated into CI/CD pipelines
• Build and operate infrastructure security guardrails (Terraform, cloud, Kubernetes)
• Own security tooling as products (architecture, reliability, lifecycle)
• Implement audit logging, change tracking, and security evidence generation
• Design and evolve vulnerability management foundations (inventory, scoping, correlation)
• Define and enforce infrastructure security baselines
• Work with compliance teams to support audits (e.g., PCI DSS) through technical evidence
• Collaborate with SOC and operational teams to ensure controls are usable in practice

About You:

• Strong experience with CI/CD systems (GitHub Actions, GitLab CI, Jenkins, etc.)
• Infrastructure as Code (Terraform or similar)
• Cloud platforms (AWS, GCP, Azure)
• Container and Kubernetes security concepts (Falco, Trivy, etc.)
• Logging, auditability, and change tracking
• Understanding of vulnerability management fundamentals (CVEs, scanners, remediation, validation)

Nice to Have:

• Runtime security and drift detection
• Secret scanning and prevention
• Experience building internal security tooling
• Exposure to compliance frameworks (PCI DSS, SOC 2, ISO 27001)
• Developing experience (Python, Go, etc.)

What We Offer:

The hiring stages: TA screening -> Hiring Manager Interview -> Assignment -> Final Interview.

Sounds like a great opportunity for your career development? Then go ahead and apply! We are a global community of innovators, creators, and thinkers, and we believe that diversity fuels our innovation. Sumsub is proud to be an equal opportunity employer, committed to building a diverse and inclusive workforce. We welcome applications from people of all backgrounds, cultures, genders, experiences, abilities and perspectives. Join us in shaping the future inclusively.