Senior DevSecOps Engineer

About the role

Company Overview:

Zocks is an AI platform transforming how financial advisors work. Starting in the US financial services market, we're building technology that supports advisors across their entire workflow - from sales and meeting preparation to note-taking, follow-ups, scheduling, email, document intelligence, reporting, and integrations with the systems they use every day.

Our goal is to take repetitive, manual work out of the advisor-client relationship and turn conversations, documents, and data into actions automatically. As our platform expands across more workflows, customers, and use cases, we're solving increasingly complex challenges around AI, real-time systems, data, security, integrations, and scale.

Zocks is headquartered in San Francisco, while our entire R&D organization - Engineering, Product, Design, Data, and Infrastructure - is based in Budapest. This means our Budapest teams don't just execute on a product built elsewhere: they're directly responsible for shaping the product, technology, and how we build them as we grow.

More than 5,000 firms, including 6 of the 9 Barron’s Top Mega RIAs and 2 of the top 3 life insurance carriers, rely on Zocks, the #1 rated AI Assistant for Financial Services on G2.

Location: Budapest, XI., Science Park (On-site Monday to Thursday, Remote on Fridays)

Why we're hiring for this role: We're rapidly expanding, and with that comes an increasing urgency to mature our security posture. Compliance readiness, and proactive risk management are becoming equally critical — this role will be a key driver of those efforts alongside infrastructure ownership. This could be a unique opportunity to have a big impact in owning security initiatives and establishing a strong security baseline at Zocks.

Key challenges you will work on every day: - Owning the full cloud infrastructure lifecycle across multi-region environments

- Owning and hardening the security perimeter across cloud and network boundaries

- Triaging and remediating findings from penetration tests and vulnerability scans in collaboration with external security partners

- Creating and maintaining our delivery pipeline from developer machines to production, including automated security checkpoints, secrets scanning, and dependency auditing.

- Supporting compliance initiatives (e.g. SOC 2, ISO 27001, NIST) through infrastructure controls, audit logging, and evidence collection

- Optimizing network topology for the best possible connectivity, latency and throughput for end users

What you need: - 6+ years relevant experience (DevOps/Security)

- Deep understanding of AWS security services (IAM, Security Hub, GuardDuty, SCPs, network ACLs)

- Strong knowledge of cloud security best practices

- Experience with network security (VPNs, firewalls, zero-trust architecture, ingress/egress protection)

- Linux hardening experience