Senior DevSecOps Engineer

Brak informacji o wynagrodzeniu

SeniorHybryda·LisbonFull-time

#466111·Dodano wczoraj·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

AdvisorySecuritytrainingrelease managementCI/CD Git OWASPCloudMicrosoft Azure Jenkins

Podsumowanie oferty

The Senior DevSecOps Engineer will embed security controls and practices into the software delivery lifecycle. The role focuses on securing application delivery pipelines, vulnerability management, and supporting development teams with secure engineering practices, using CI/CD security controls and tools such as GitHub Advanced Security, SonarQube, and JFrog.

Wymagania

Must have:

Proven experience in DevSecOps, application security, or DevOps engineering.
Strong hands-on experience with CI/CD pipelines and secure delivery practices.
Experience with GitHub Enterprise, GitHub Advanced Security, SonarQube configuration and governance, JFrog Artifactory, and Xray.
Strong understanding of vulnerability management and the secure artifact lifecycle.
Experience working directly with development teams on remediation.
Knowledge of Git workflows, release management, and deployment governance.
Experience in regulated or large enterprise environments.
Extensive hands-on experience with multiple cloud security tools and technologies, gained through several years of designing, implementing, and operating secure cloud environments.

Technical skills:

GitHub Advanced Security, SonarQube, JFrog Artifactory, and Xray.
GitHub Actions, Azure DevOps, Jenkins, GitLab CI, pipeline-as-code, and automated security gates.
SAST, SCA, secrets management, OWASP Top 10, vulnerability triage, and remediation.
Docker/OCI, Kubernetes/OpenShift, container registries, and image governance.
GitFlow, branching strategies, pull request governance, artifact immutability, and traceability.

Obowiązki

Secure delivery architecture and controls:

Define and implement secure DevSecOps architectures and CI/CD security controls, including SAST, SCA, secrets, containers, SBOM, and quality gates.
Integrate and manage security tools, including GitHub Advanced Security, SonarQube, and JFrog, in development workflows.
Establish secure artifact management and controlled promotion across environments.

Vulnerability and repository security:

Manage vulnerabilities end-to-end, including analysis, prioritization, remediation support, and reporting.
Configure GitHub security features and enforce repository and PR governance standards.
Maintain code quality and security policies using SonarQube.
Secure artifact repositories and dependencies using JFrog Artifactory and Xray.

Release governance and team enablement:

Define branching strategies and enforce secure release and deployment controls.
Ensure traceability, auditability, and governance across the delivery lifecycle.
Support development teams through guidance, training, and practical secure implementations.

Inne informacje

Candidates must be based in Portugal.
On-site work is scheduled for two days in weeks 1 and 2, followed by a fully remote week; this pattern repeats, with the possibility of gradually reducing on-site work to one day per week.

emagine

1217 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz