Senior DevSecOps Engineer

Location: Budapest, XI., Science Park (On-site Monday to Thursday, Remote on Fridays)

Why we're hiring for this role: We're rapidly expanding, and with that comes an increasing urgency to mature our security posture. Compliance readiness, and proactive risk management are becoming equally critical — this role will be a key driver of those efforts alongside infrastructure ownership. This could be a unique opportunity to have a big impact in owning security initiatives and establishing a strong security baseline at Zocks.

Key challenges you will work on every day

• Owning the full cloud infrastructure lifecycle across multi-region environments
• Owning and hardening the security perimeter across cloud and network boundaries
• Triaging and remediating findings from penetration tests and vulnerability scans in collaboration with external security partners
• Creating and maintaining our delivery pipeline from developer machines to production, including automated security checkpoints, secrets scanning, and dependency auditing.
• Supporting compliance initiatives (e.g. SOC 2, ISO 27001, NIST) through infrastructure controls, audit logging, and evidence collection
• Optimizing network topology for the best possible connectivity, latency and throughput for end users

What you need

• 6+ years relevant experience (DevOps/Security)
• Deep understanding of AWS security services (IAM, Security Hub, GuardDuty, SCPs, network ACLs)
• Strong knowledge of cloud security best practices
• Experience with network security (VPNs, firewalls, zero-trust architecture, ingress/egress protection)
• Linux hardening experience
• Experience with secrets management (Vault, AWS Secrets Manager)
• Knowledge of PKI / certificate lifecycle management
• Experience with compliance and audit requirements (SOC2, ISO27001, CIS Benchmarks)
• Ability to understand penetration testing findings and coordinate remediation efforts
• Experience with security incident response and risk prioritization
• Fluent English and Hungarian language knowledge

Bonus points for

• Kubernetes security experience
• Familiarity with runtime security tooling (Falco, Wiz, Crowdstrike)
• Experience reviewing Terraform / IaC security configurations
• Exposure to Azure or GCP security
• Python or Go scripting skills
• Experience with container security scanning tools
• Threat modeling experience
• Security automation experience

What we offer on top of our competitive base salary:

• Premium Health Insurance
• SZÉP-card -Your lunch is on us when you are in the office
• L&D contribution
• AYCM package
• Employee equity program -Budapest pass (BKK)
• Home office support -Loyalty program: extra PTO
• Fully stacked office snacks

Location: Budapest, XI. (On-site Monday to Thursday, Remote on Fridays)

Company Overview:

Zocks is an AI platform transforming how financial advisors work. Starting in the US financial services market, we're building technology that supports advisors across their entire workflow - from sales and meeting preparation to note-taking, follow-ups, scheduling, email, document intelligence, reporting, and integrations with the systems they use every day.

Our goal is to take repetitive, manual work out of the advisor-client relationship and turn conversations, documents, and data into actions automatically. As our platform expands across more workflows, customers, and use cases, we're solving increasingly complex challenges around AI, real-time systems, data, security, integrations, and scale.

Zocks is headquartered in San Francisco, while our entire R&D organization - Engineering, Product, Design, Data, and Infrastructure - is based in Budapest. This means our Budapest teams don't just execute on a product built elsewhere: they're directly responsible for shaping the product, technology, and how we build them as we grow.

More than 5,000 firms, including 6 of the 9 Barron’s Top Mega RIAs and 2 of the top 3 life insurance carriers, rely on Zocks, the #1 rated AI Assistant for Financial Services on G2.