<div><strong>About Dodo Payments</strong></div><div><br></div><div><a href="https://www.dodopayments.com" rel="noopener noreferrer" target="_blank"><strong>Dodo Payments</strong></a> is a global <strong>Merchant of Record platform</strong> built for modern digital businesses. We make it effortless for founders to sell anywhere in the world by taking ownership of payments, local taxes, compliance, fraud prevention, and invoicing.</div><div><br></div><div>Our job is simple in principle and hard in execution: remove every operational distraction between a product and its revenue, so teams can stay focused on building and shipping.</div><div><br></div><div>Today, Dodo Payments powers revenue for thousands of businesses across the globe and operates at true global scale.</div><div><br></div><div><strong>What we’ve built so far</strong></div><div><br></div><ul><li>Trusted by <strong>25,000+ businesse</strong>s across<strong> 220+ countries and territories</strong></li><li>Supporting <strong>30+ local payment methods </strong>worldwide</li><li><strong>Ambitious roadmap:</strong>&nbsp;empower 50,000+ businesses over the next two years.</li><li>Backed by<strong> Antler, 9Unicorns, and leading angels,</strong> with <strong>$1.5M raised in seed funding</strong></li></ul><div><br></div><div><strong>How we work</strong></div><div><br></div><div><strong>Engineering-first, product-led</strong></div><div>Our stack includes Rust, Next.js, Kubernetes, Kafka, Postgres, and Cloudflare. We build systems that move real money, handle real compliance, and operate at global scale. Reliability and correctness matter.</div><div><br></div><div><strong>Global by design</strong></div><div>We’re a distributed team with async-friendly processes and a strong bias toward outcomes over hours logged.</div><div><br></div><div><strong>High ownership, real impact</strong></div><div>Small teams, wide ownership. Everyone ships work that directly affects customers, revenue, and platform stability.</div><div><br></div><div><strong>Radical transparency</strong></div><div>Clear goals, open OKRs, regular town halls, and direct feedback. </div><div><br></div><div><strong>Why join Dodo Payments now</strong></div><div><br></div><div>We’re at an inflection point. Dodo Payments is large enough to solve meaningful, complex problems at scale, yet small enough that every new hire materially shapes the product, culture, and direction of the company.</div><div>If you enjoy ownership, first-principles thinking, and building infrastructure that powers global digital and AI-native businesses, you’ll feel at home here.</div><div><br></div><div><strong>Come build with us</strong></div><div>If you’re excited about building the monetisation engine behind the next generation of digital products, we’d love to hear from you.</div><div>﻿</div>

Dodo Payments

<div>
<div class="p-rich_text_section"><b>About the Role</b><br>We are looking for a motivated DevSecOps Engineer to strengthen our infrastructure and security posture across the cloud and CI/CD ecosystem. The ideal candidate has hands-on experience in Kubernetes, cloud-native security, and compliance automation, with strong technical expertise in vulnerability management, observability, and secure software delivery aligned with PCI-DSS and SOC 2 standards.</div>
<div class="p-rich_text_section">&nbsp;</div>
<div class="p-rich_text_section"><b>Key Responsibilities</b></div>
<ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested">
<li>Design, implement, and secure CI/CD pipelines following DevSecOps principles and GitOps workflows (ArgoCD).</li>
<li>Integrate security tools across build and deployment pipelines for SAST, DAST, dependency scanning, and CVE management.</li>
<li>Manage and harden containerized workloads on Kubernetes and Docker, implementing runtime security controls and RBAC policies.</li>
<li>Automate compliance checks and audit data collection to maintain PCI DSS and SOC 2 readiness.</li>
<li>Deploy, monitor, and secure infrastructure across AWS, GCP, or Azure environments.</li>
<li>Configure and operate observability and security monitoring tools (Prometheus, Grafana, OpenTelemetry, Loki, Wazuh).</li>
<li>Collaborate with the security team to establish threat detection, incident response, and log correlation workflows using SIEM tools.</li>
<li>Strengthen cluster and network security through Istio, NetworkPolicies, and zero-trust design principles.</li>
</ul>
<div class="p-rich_text_section"><b>Required Skills &amp; Qualifications</b></div>
<ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested">
<li>1–3 years of experience in DevSecOps, Security Engineering, or Cloud Security roles.</li>
<li>Strong understanding of Kubernetes, Docker, Linux, and networking fundamentals.</li>
<li>Experience with security scanning, vulnerability management, and CVE patch automation.</li>
<li>Working knowledge of GitOps (ArgoCD), CI/CD tools (GitHub Actions, Jenkins, etc.), and IaC security (Terraform, Helm).</li>
<li>Familiar with cloud provider security services (AWS IAM, Security Hub, GCP Security Command Center, etc.).</li>
<li>Understanding of monitoring, alerting, and tracing stacks — Prometheus, Grafana, Loki, OpenTelemetry.</li>
<li>Practical exposure to compliance frameworks (PCI DSS, SOC 2) and audit readiness processes.</li>
<li>Excellent debugging, documentation, and cross-functional communication skills.</li>
</ul>
<div class="p-rich_text_section"><strong>Good to Have</strong></div>
<ul class="p-rich_text_list p-rich_text_list__bullet p-rich_text_list--nested">
<li>Hands-on with Wazuh, Trivy, or other vulnerability/scanning tools.</li>
<li>Knowledge of service mesh security (Istio mTLS, certificate rotation).</li>
<li>Exposure to SIEM, threat intelligence, or incident response workflows.</li>
<li>Cloud certifications (AWS/GCP/Azure) or Kubernetes certifications (CKA/CKS) are a plus.</li>
</ul>
</div>