DevSecOps Engineer
Tunis,
Tunisia
Building a Secure Future at Kiffcom
At Kiffcom, our mission is to redefine the digital landscape through innovative technology and uncompromising security. We believe that a better future is built on trust, and we are looking for a visionary DevSecOps Engineer to serve as the architect of that trust. You will be the primary bridge between our development velocity and our security posture, ensuring that every line of code we ship is as resilient as it is functional.
In this role, you will work onsite at our Tunis office, operating on Canadian time to maintain seamless collaboration with our North American partners. This is more than a technical position; it is a chance to shape the engineering culture of a growing company and leave a lasting impact on how we build and deploy software. If you thrive on autonomy and the opportunity to lead a security revolution from the ground up, Kiffcom is your next home.Â
Responsibilities
- Integrate security tools directly into CI/CD pipelines to automate vulnerability scanning and compliance checks.
- Design and maintain secure, scalable cloud infrastructure (AWS/Azure) utilizing Infrastructure as Code (IaC) principles.
- Conduct regular vulnerability assessments and penetration testing to identify and mitigate risks before they reach production.
- Implement automated guardrails and policies for least-privilege access and data encryption.
- Monitor production environments for suspicious activity and lead incident response and remediation efforts.
- Collaborate across teams to advocate for "Shift Left" security practices and mentor developers on secure coding standards.
- Perform code reviews and risk analyses for new features and architectural changes.
Must-Have
- Bachelor’s degree in Computer Science, Cybersecurity, or a related technical field.
- Proven experience in a DevSecOps or Security Engineering role.
- Expertise in automation and scripting (e.g., Python, Bash, or Go).
- Hands-on experience with CI/CD platforms (e.g., Jenkins, GitLab CI) and containerization (Docker, Kubernetes).
- Deep understanding of cloud security architectures and best practices.
- Willingness to work onsite in Tunis during Canadian business hours.
Nice to Have
- Relevant certifications such as Certified DevSecOps Professional (CDP), AWS Security Specialty, or CompTIA Security+.
- Experience with security orchestration and automated remediation tools.
- Familiarity with compliance frameworks like ISO 27001, NIST, or GDPR.
- Knowledge of GenAI security and securing AI-generated code.
What’s great about the job?
Direct Impact: You aren't just a cog in a machine; you are the founding architect of our security culture.
Professional Growth: We provide an environment where you are encouraged to master emerging technologies and lead technical innovation.
A "Better Future": Join a mission-driven company where your work directly contributes to building a safer digital world.
Global Collaboration: Gain unique experience working in a cross-continental environment, bridging the gap between Tunisian talent and Canadian markets.
Our Services
What we offer
We offer a high-autonomy environment where your vision and expertise determine our technical roadmap. At Kiffcom, your value is measured by the growth you drive and the security you build for our collective future.
Growth
Impact
The opportunity to own the end-to-end security strategy for a global platform.
Culture
A collaborative, transparent environment where your voice matters.
Innovation
Access to the latest tools and a culture that embraces "Always Learning".
