DevSecOps Engineer (43239)

I am looking for a Senior DevSecOps Engineer to join the AppSec Platform team and help embed security into development processes. You will design secure CI/CD pipelines, implement DevSecOps practices and build automation that improves software delivery. The role requires strong experience with cloud, CI/CD tools and application security concepts, along with the ability to collaborate across teams.

🚀 Project
- design, build and maintain security automations, scripts, templates and internal tooling
- improve and secure CI/CD pipelines with a security-first mindset
- implement DevSecOps practices (SAST, DAST, secrets management, vulnerability management, container security)
- integrate security controls and compliance checks into development workflows and platform services
- support infrastructure-as-code and cloud security initiatives
- collaborate with development teams to improve secure software delivery practices
- define technical standards, documentation, runbooks and implementation guides
- contribute to continuous improvement of AppSec platform tooling and processes
- work closely with developers, architects and security teams to embed security into SDLC
- support agile delivery by facilitating collaboration and contributing to team processes

🎯 Skills
- 5+ years of experience in DevSecOps, Platform Engineering, Cloud Engineering or Application Security
- experience with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)
- experience with scripting and automation (Python, Bash, PowerShell)
- strong understanding of secure SDLC and application security principles (OWASP, SAST, DAST, secrets management, vulnerability management)
- experience with cloud platforms (AWS, Azure, GCP)
- experience with infrastructure-as-code and automation practices
- strong collaboration and communication skills
- experience working in agile environments and facilitating team processes

💡 Nice to have
- Scrum Master certification (CSM, PSM or equivalent)
- experience with internal developer platforms or platform engineering
- experience with security tooling and compliance automation
- familiarity with Kubernetes, containers and cloud-native technologies
- experience from enterprise environments