Lead DevSecOps Engineer | Ukraine

Brak informacji o wynagrodzeniu

SeniorZdalnie·KijówFull-time

#471192·Dodano 3 dni temu·0

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

SecurityCloud securitySDLCIAMCI/CD PipelinesSASTDASTIaCGitLab CI GitHub ActionsAzure DevOpsJenkinsCloud platformAzure AWS GCP Docker KubernetesInfrastructure as CodeTerraform Ansible Helm Python BashCloudSLAStakeholder managementCybersecurityAIGitHub Claude

Podsumowanie oferty

As a Lead DevSecOps Engineer, you will deliver security solutions for international clients, primarily German companies, while leading and developing the DevSecOps team. The role focuses on integrating security into software delivery and strengthening cloud and infrastructure security using CI/CD pipelines, cloud platforms, and security automation.

Wymagania

5+ years of hands-on commercial experience in DevSecOps, Cloud Security, or a related field.
Strong expertise in DevSecOps and application security, including secure SDLC, vulnerability management, threat modeling, secrets management, IAM, and encryption.
Extensive experience implementing and managing security tools in CI/CD pipelines, including SAST, DAST, SCA, SBOM, container and IaC scanning, with a focus on scalability and reducing false positives.
Ability to design, implement, and maintain secure CI/CD pipelines using GitLab CI, GitHub Actions, Azure DevOps, Jenkins, or similar platforms, including reusable templates and secure-by-default practices.
Experience with at least one major cloud platform (Azure, AWS, or GCP) and its security services.
Hands-on experience with Docker, Kubernetes, and container security.
Practical experience with Infrastructure as Code and configuration management tools such as Terraform, Ansible, and Helm.
Strong scripting and programming skills in Python and Bash.
Understanding of secure architecture principles and security best practices across cloud and on-premises environments.
Experience defining and monitoring security metrics, including scan coverage, remediation timelines, and SLA compliance.
Ability to translate technical security risks into clear business recommendations.
Strong communication and stakeholder management skills, including leading workshops, presenting to senior stakeholders, and independently managing client-facing workstreams.
Fluent English.

Nice to have:

1+ year of experience as a Team Lead or Tech Lead, including task allocation, technical reviews, and mentoring engineers.
Previous consulting experience, ideally working with German or DACH-region clients.
Familiarity with EU cybersecurity regulations and standards, such as NIS2, DORA, the Cyber Resilience Act, and BSI C5.
Experience designing and implementing security controls for modern GenAI architectures.
Experience integrating AI into DevSecOps processes, including AI-assisted vulnerability triage, secure code reviews, automated remediation, threat modeling, and security workflows.
Experience measuring the effectiveness of AI-driven security solutions, including accuracy, false-positive rates, and remediation time.
Experience establishing secure practices for AI coding assistants such as GitHub Copilot, Cursor, or Claude Code, including data protection, security guardrails, MCP integrations, and AI-generated code controls.
Relevant DevSecOps or Cloud Security certifications.
Experience selecting and implementing ASPM, CNAPP, CWPP, or CSPM solutions.

Obowiązki

Client project delivery (70–80%):

Assess clients’ DevSecOps maturity and develop practical security improvement roadmaps.
Integrate security practices into CI/CD pipelines and software development workflows.
Design and implement secure cloud and infrastructure solutions, helping clients establish security standards and best practices.
Select, integrate, and optimize security scanning tools for source code, dependencies, containers, and infrastructure.
Advise clients on securing cloud environments, Kubernetes platforms, and supporting services.
Conduct technical workshops and knowledge-sharing sessions with client teams.
Analyze vulnerabilities, misconfigurations, and findings from security scans, penetration tests, and audits, and support remediation.
Help clients adopt AI-assisted security solutions, evaluate their effectiveness, and establish appropriate security controls.
Prepare technical documentation, security assessment reports, architecture recommendations, and other client deliverables.
Collaborate with development, DevOps, and security teams, as well as Deloitte Germany colleagues, to improve security maturity.
Optimize deployment and operational processes with a focus on security, automation, and reliability.

Team leadership (20–30%):

Lead and mentor DevSecOps engineers, supporting their technical and professional development.
Plan and coordinate team activities across client engagements.
Review technical solutions, provide constructive feedback, and support technical decision-making.
Participate in recruitment and team development activities.
Support presales activities, including project scoping, effort estimation, and technical contributions to proposals.
Communicate project progress, key risks, and outcomes to client stakeholders and engagement leadership.

Benefity

Opportunity to work on international DevSecOps projects, primarily with German clients.
Combination of hands-on technical work and team leadership responsibilities.
Opportunities to work with modern cloud security, DevSecOps, and AI-assisted security technologies.
Collaboration with international teams, including Deloitte Germany colleagues.
Opportunities to contribute to technical decision-making, security improvements, and the development of the DevSecOps team.

Deloitte

86 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz