10/30/2026 updated
SR
100 % available
DevSecOps & Linux Engineer | CI/CD Security | Kubernetes | Cloud Security
Banja Luka, Bosnia-Herzegovina
Only remote
Bachelor's in Information TechnologyCloud Computing SecurityCloud EngineeringLinuxDevOpsVulnerability ScanningAnsibleSecurity Content Automation ProtocolVirtualizationVulnerability ManagementCertified Linux EngineerGitlab-ciSelinuxKubernetesTerraformDevSecOps
CI/CD Security & Automation
Expertise in building and securing CI/CD pipelines using Jenkins, GitHub Actions, and GitLab CI/CD. Integration of secrets scanning, pipeline access hardening, automated DAST checks, and security gates into delivery workflows to catch vulnerabilities before production releases.
Kubernetes & Cloud-Native Infrastructure
Hands-on experience designing and managing Kubernetes-based deployment platforms including Helm, Kustomize, Ingress, NGINX, RBAC, Secrets/ConfigMaps, HPA, and Prometheus/Grafana monitoring. Deployment of containerized workloads with a focus on security and observability.
Vulnerability Scanning & Web Security
Practical knowledge of OWASP Top 10 and API Top 10 risks, including XSS, SQLi, CSRF, SSRF, LFI/RFI, and JWT attacks. Development of custom security scanners and integration of DAST tools into DevSecOps workflows for automated security validation.
Cloud & Virtualization
Experience with major cloud and virtualization platforms including AWS, Proxmox, VMware, and DigitalOcean for infrastructure provisioning and management.
Cloud Security
Application of cloud security best practices using AWS IAM, KMS, GuardDuty, CloudWatch, and security group hardening to protect cloud environments.
Container Security
Hardening of Docker containers and Kubernetes environments, including image scanning and enforcement of least privilege and secure defaults.
Networking & Security
Configuration and hardening of Linux firewalls, Nginx, Apache, SSH, SELinux, TLS, and VPNs for secure network infrastructure.
Monitoring & Logging
Setup and management of monitoring and logging solutions using Prometheus, Grafana, and the ELK Stack to improve visibility and incident response.
Infrastructure as Code & Configuration Management
Automation of server provisioning and configuration using Terraform and Ansible, enabling repeatable and secure infrastructure deployments.
SIEM Integration
Integration of SIEM enrichment through tools such as ELK, VirusTotal, and Nuclei to support threat detection and security operations.
Expertise in building and securing CI/CD pipelines using Jenkins, GitHub Actions, and GitLab CI/CD. Integration of secrets scanning, pipeline access hardening, automated DAST checks, and security gates into delivery workflows to catch vulnerabilities before production releases.
Kubernetes & Cloud-Native Infrastructure
Hands-on experience designing and managing Kubernetes-based deployment platforms including Helm, Kustomize, Ingress, NGINX, RBAC, Secrets/ConfigMaps, HPA, and Prometheus/Grafana monitoring. Deployment of containerized workloads with a focus on security and observability.
Vulnerability Scanning & Web Security
Practical knowledge of OWASP Top 10 and API Top 10 risks, including XSS, SQLi, CSRF, SSRF, LFI/RFI, and JWT attacks. Development of custom security scanners and integration of DAST tools into DevSecOps workflows for automated security validation.
Cloud & Virtualization
Experience with major cloud and virtualization platforms including AWS, Proxmox, VMware, and DigitalOcean for infrastructure provisioning and management.
Cloud Security
Application of cloud security best practices using AWS IAM, KMS, GuardDuty, CloudWatch, and security group hardening to protect cloud environments.
Container Security
Hardening of Docker containers and Kubernetes environments, including image scanning and enforcement of least privilege and secure defaults.
Networking & Security
Configuration and hardening of Linux firewalls, Nginx, Apache, SSH, SELinux, TLS, and VPNs for secure network infrastructure.
Monitoring & Logging
Setup and management of monitoring and logging solutions using Prometheus, Grafana, and the ELK Stack to improve visibility and incident response.
Infrastructure as Code & Configuration Management
Automation of server provisioning and configuration using Terraform and Ansible, enabling repeatable and secure infrastructure deployments.
SIEM Integration
Integration of SIEM enrichment through tools such as ELK, VirusTotal, and Nuclei to support threat detection and security operations.
Project history
Improved CI/CD security by adding secrets scanning, pipeline access hardening, and automated DAST checks. Integrated PentestScan into delivery workflows to catch Web/API security issues before production releases. Hardened Nginx, Docker, Kubernetes, and Terraform configurations with a focus on least privilege and secure defaults. Automated server provisioning with Ansible and improved visibility through Prometheus/Grafana monitoring and alerting.
Built CI/CD workflows for web applications using Jenkins, GitHub Actions, and automated test execution. Configured Nginx, Kubernetes deployment structure, ingress routing, secrets handling, and health checks. Added monitoring with Prometheus/Grafana to make deployments easier to observe and troubleshoot.
Hardened Linux servers, SSH access, firewall rules, VPN setup, and Proxmox-based infrastructure. Investigated logs and network traffic to detect anomalies and support more stable testing environments. Built a Linux-based GPS simulation tool used for controlled network testing scenarios.