Company
DK Bank is a leading Bhutanese financial institution and the official bank of Gelephu Mindfulness City, redefining banking for the digital age while expanding its global presence.
Role
Senior Security Engineer (DevSecOps) - you'll own security across DK Bank's technology stack: digital banking, payments, core banking, and partner-facing APIs. Security engineers with strong infrastructure skills, or DevOps engineers who've gone deep on security, are both welcome.
What you'll do
- Set and enforce the security posture of our AWS platform: IAM, network segmentation, KMS, hardening
- Threat-model and review designs across banking systems - payment flows, APIs, SWIFT CSP compliance
- Embed security into CI/CD and IaC (Terraform/CDK): scanning, secrets management, guardrails as code
- Lead detection and response: monitoring, alerting, incident handling, forensics
- Coordinate penetration tests and audits; drive remediation to closure
- Harden Kubernetes workloads and keep the platform reliable
- Mentor engineers and grow a security-first culture
What you bring
- Strong security engineering background: AppSec, cloud security, or infrastructure security, with hands-on DevOps skills
- Deep AWS security experience: IAM, VPC, KMS, GuardDuty/Security Hub, multi-account
- AppSec fundamentals: OWASP, API security, secure code review
- IaC with Terraform or CDK; secure CI/CD and Kubernetes operations
- Incident response experience
- Bonus: financial-sector compliance (SWIFT CSP, PCI DSS, ISO 27001), pentesting or red team background
What we offer
- Competitive compensation from a sovereign-backed fintech
- Real security ownership across a national bank's entire stack
- A dynamic, passionate team and a conducive work environment