DevSecOps Engineer (m/f/d)

SOFICO; Belgique; Hybrid; EUR 75,000 - 95,000; Full time

Benefits offered by this job

Company car with fuel/charging card or

Flexible mobility budget

Meal vouchers

Healthcare

Hybrid working

Vacation days

Job summary

SOFICO in Ghent (Zwijnaarde) is seeking a DevSecOps Engineer to strengthen security across hybrid on‑prem and cloud environments while delivering scalable integrations for Miles. You’ll embed security into CI/CD, manage vulnerabilities and patching, and drive secure lifecycle management.

You will collaborate with IT and development teams to automate security processes, support incident response, and ensure compliance across platforms.

Qualifications

• Hands-on experience with vulnerability management, patch management, and lifecycle management across hybrid on-premises and cloud environments.
• Solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure.
• Scripting and automation using PowerShell, Bash, or Python; IaC tools such as Terraform and Ansible.
• Familiarity with ISO 27001 and NIS2; translate requirements into operational controls.
• Knowledge of CIS Benchmarks; identify and implement improvements based on maturity assessments.
• Experience with SIEM/EDR tooling and threat intelligence to prioritize remediation.
• Fluency in English; additional languages are a plus.

Responsibilities

• Take ownership of vulnerability management lifecycle from discovery through remediation tracking.
• Coordinate patch management across servers, endpoints, containers and cloud workloads.
• Monitor asset and software lifecycles; identify end-of-life components and coordinate upgrades.
• Operate security tooling including XDR, SIEM, vulnerability scanners, and baselining tools.
• Implement security controls across CI/CD pipelines and cloud configurations (CIS/NIST).
• Investigate security events, support incident response, translate lessons into preventive measures.
• Translate compliance requirements into actionable tasks, runbooks, and automation.
• Ensure controls are measurable, traceable, and auditable.

Skills

Vulnerability management

Patch management

Lifecycle management

Azure security

Scripting (PowerShell/Bash/Python)

Infrastructure-as-Code (Terraform/AnsI

Tools

Azure

SIEM/EDR

XDR

Terraform

Ansible

PowerShell

Bash

Python

Job description

At SOFICO, we’re shaping the future of mobility - and we’re doing it together. Our software, Miles, is a leading platform that enables companies worldwide to manage their leasing, fleet, and mobility operations in one integrated system. Every day, we help our customers work smarter, more efficiently, and stay ahead in a rapidly evolving industry.

Behind that impact is a close-knit, international team that values collaboration, ownership, and continuous growth. We move forward with ambition but stay grounded in a culture where people support each other and take pride in what they build.

From our office in Zwijnaarde (Ghent), we’re looking for an DevSecOps Engineer who’s eager to contribute to delivering seamless, scalable, and reliable integrations that support customers' business processes.

What You’ll Do...

As a DevSecOps Engineer, you’ll help keep our platforms, endpoints, and cloud environments secure throughout their lifecycle. You’ll embed security controls into day-to-day operations, focusing on vulnerability management, patch management, and lifecycle management. Working closely with IT, infrastructure, and development teams, you’ll help remediate risks, automate security controls, and ensure our security requirements are effectively implemented in production.

• Take ownership of the vulnerability management lifecycle, from discovery and risk-based prioritization to remediation tracking and reporting
• Coordinate patch management across servers, endpoints, containers, and cloud workloads, ensuring agreed security SLAs are met
• Monitor asset and software lifecycles, identifying end-of-life and end-of-support components and coordinating timely upgrades or decommissioning
• Operate and continuously improve security tooling, including monitoring solutions, XDR, SIEM, vulnerability scanners, and configuration baselining tools
• Implement and strengthen security controls across infrastructure-as-code, CI/CD pipelines, and cloud configurations, following recognized baselines such as CIS and NIST
• Investigate operational security events, support incident response, and translate lessons learned into preventive measures
• Turn compliance requirements and risk treatment decisions into actionable operational tasks, runbooks, and automation
• Ensure security controls are measurable, traceable, and properly documented to support internal and external audits

What You Bring...

You’re passionate about cybersecurity and enjoy finding practical ways to make systems more secure without compromising their reliability. You combine a hands‑on approach with an automation mindset and enjoy collaborating with different teams to turn security requirements into effective technical solutions.

• Hands‑on experience with vulnerability management, patch management, and lifecycle management across hybrid on‑premises and cloud environments
• A solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure
• Working knowledge of scripting and automation using PowerShell, Bash, or Python, as well as infrastructure‑as‑code tools such as Terraform and Ansible
• Familiarity with cybersecurity frameworks such as ISO 27001 and NIS2, and the ability to translate requirements into operational controls
• Knowledge of security benchmarks, including CIS Benchmarks, and the ability to identify and implement improvements based on maturity assessments
• Experience with SIEM/EDR tooling and using threat intelligence to prioritize remediation activities
• Fluency in English; additional languages are a plus

What’s In It For You...

• Competitive salary package
• Company car with fuel/charging card or a flexible mobility budget
• Meal vouchers, eco vouchers, and a monthly net expense allowance
• Hospitalization insurance and group insurance
• Hybrid working, flexible hours, and generous vacation days (including ADV and seniority leave)
• Bike leasing and additional mobility benefits
• Modern, easily accessible office in Ghent with EV charging facilities
• Structured onboarding with a dedicated coach from day one
• Continuous learning and career development in an international, multicultural company
• A vibrant company culture with regular team events, family days, sports activities, and celebrations

Ready to make an impact in the world of mobility? Join SOFICO and let’s shape what’s next together!