DevSecOps Engineer

FINNPLAY Technologies Oy is a Finnish software development company specialized in applications for the iGaming industry. We have been over 15 years in the market and are recognised as one of the leading platform technology providers. Our customers include some of the top online casino operators in regulated markets in Europe and elsewhere around the world. Our technology and services provide the technical framework on which iGaming operators build their successful businesses. The industry is dynamic and fast growing, especially as more jurisdictions legalize iGaming and provide a regulatory process for online gambling. Finnplay is also strongly committed to helping players enjoy the iGaming experience safely using technology to provide a safer and more responsible online gambling environment.

Our team consists more than 150 talented professionals in four offices, with headquarters in Espoo. We offer a flexible working environment and plenty of opportunities for career growth. Our company is also a part of Entain Group PLC - one of the largest businesses in the industry - stock-listed in London and employing over 30,000 people around the world. So our employees get the benefit of being part of a large international network of like-minded professionals. Learn more about Finnplay and our team at http://www.finnplay.com. Here you can learn more about our platform: https://www.finnplay.com/titan-platform.

Now we are looking for an experienced and security-first DevSecOps Engineer to join our growing team. In this role, you will be responsible for embedding security principles and practices throughout our entire software development lifecycle (SDLC), with a special focus on leveraging the external security provider platform to protect our applications, networks, and data. You will act as the bridge between our development, operations, infra and providers, ensuring that our infrastructure is both highly performant and resilient against modern threats. The ideal candidate has a strong background in DevOps automation, cloud-native security, and hands-on experience configuring and managing Cloudflare's security and performance suite. This role is located in Espoo, Finland and we expect you to come to the office at least twice a week. Salary for this role will be 5500-6200€/month gross.

YOUR JOB IN A NUTSHELL:

• Design, build, and maintain secure CI/CD pipelines, integrating security testing tools (SAST, DAST, SCA) and automated compliance checks.
• Work closely with the internal Security team to implement security tests and drive the timely mitigation of identified vulnerabilities.
• Manage and fine-tune Web Application Firewall, CDN to protect against vulnerabilities and attacks, and ensure the application performance and availability.
• Write and maintain secure IaC to provision and manage cloud/on-premises infrastructure and WAP configurations.
• Collaborate with provider, internal teams, and clients to express requirements and design solutions bidirectionally.
• Build and maintain automated scripts and tools to streamline security operations, such as log analysis, threat detection, and policy enforcement.
• Proactively identify, assess, and remediate security vulnerabilities in applications, containers, and cloud environments.
• Act as a security champion, mentoring development teams on secure coding best practices and evangelizing a "security as code" culture.
• Serve as a key technical resource in security incident response, leveraging Cloudflare logs and dashboards to investigate and mitigate active threats.

IN ORDER TO SUCCEED IN THIS ROLE, THESE ARE SOME OF MUST-HAVES:

• 3-5+ years of experience in a DevSecOps, DevOps, or Security Engineering role.
• Hands-on experience with the Cloudflare platform, specifically on Application Security, Zero Trust, and CDN.
• Hands-on experience with containerization and orchestration with Docker, Kubernetes.
• Strong proficiency with CI/CD tools, e.g., Jenkins, GitHub Actions.
• Strong scripting skills with Python, Bash, or Go.
• Deep experience with at least one major cloud provider, AWS, GCP, or Azure.
• Expertise in Infrastructure as Code, e.g., Terraform.
• Strong understanding of network security, application security (OWASP Top 10), and cloud security principles.
• Ability to act as a mentor and share knowledge across the Product team.
• Excellent problem-solving abilities, strong communication, and a collaborative, team-oriented mindset.

WHY FINNPLAY?

Finnplay offers a very international work environment being the leading provider of platform technology in the Nordics. This is a great opportunity to take part in the development of a growth- and innovation-driven company and build its future. Our work culture is easy-going with low hierarchy and we want that everyone’s voice is heard.

Finnplay provides a comprehensive package of employee benefits:

• Opportunity for career development & dedicated budget for your training and development
• Epassi lunch & flex benefits
• Occupational Healthcare
• An extra day off on your birthday
• Dedicated days off for your physical and mental health
• Additional vacation days depending on the length of employment
• Wellness and team-building events
• Annual company performance bonus
• Language courses
• Paid online consultations with certified therapists
• 2 Corporate Social Responsibility days in a year
• Free use of gym in the office building

What will happen next, and how does the recruitment process look like at Finnplay?

1. Leave your application together with your resume
2. Our recruitment Specialist will be in touch with you
3. 1st meeting with our Recruitment Specialist
4. 2nd meeting with the Infrastructure Manager and the CTO
5. Reference check
6. Offer