DevSecOps Engineer (m/f/d)

Sofico

Gent

Híbrido

EUR 70.000 - 100.000

Tempo integral

Há 12 dias

Receba uma resposta desta empresa empregadora

Seu currículo e carta de apresentação personalizados exatamente para o que estão contratando.

Passe pelos filtros ATS

Benefícios oferecidos por esta vaga

Competitive salary

Hybrid work model

Company car or mobility budget

Meal vouchers

Insurance

EV charging at office

Resumo da vaga

Sofico is seeking a DevSecOps Engineer in Ghent. You will embed security into platforms, focusing on vulnerability and patch management, lifecycle oversight, and automation across hybrid on-premises and cloud environments.

You'll collaborate with IT, infrastructure, and development teams to implement controls, improve security tooling, and support audits. English fluency is required; other languages are a plus.

Qualificações

Experience securing hybrid on-premises and cloud environments.
Knowledge of OS, networking, containers, and cloud security (Azure).
Ability to script with PowerShell, Bash or Python and use IaC tools.
Understanding of ISO 27001 and NIS2 frameworks and translating to controls.
Familiarity with CIS Benchmarks and security hardening practices.
Experience with SIEM/EDR and threat intel for remediation prioritization.
English proficiency; other languages a plus.

Responsabilidades

Take ownership of vulnerability management lifecycle from discovery to remediation.
Coordinate patch management across servers, endpoints, containers and cloud workloads.
Monitor lifecycles and coordinate upgrades or decommissioning of components.
Operate and enhance security tooling like XDR, SIEM, and scanners.
Implement security controls in IaC, CI/CD, and cloud configurations.
Investigate security events and support incident response activities.
Translate risk decisions into actionable runbooks and automation.
Ensure controls are measurable and auditable.

Conhecimentos

Vulnerability management

Patch management

Lifecycle management

Operating systems & networking

Cloud security (Azure)

Scripting & automation

Infrastructure-as-code (Terraform, Ans

ISO 27001 / NIS2

SIEM/EDR

English fluency

Ferramentas

Terraform

Ansible

PowerShell

Bash

Python

Azure

Descrição da vaga

Why SOFICO?

At SOFICO, weu2019re shaping the future of mobility - and weu2019re doing it together. Our software, Miles, is a leading platform that enables companies worldwide to manage their leasing, fleet, and mobility operations in one integrated system. Every day, we help our customers work smarter, more efficiently, and stay ahead in a rapidly evolving industry.
Behind that impact is a close-knit, international team that values collaboration, ownership, and continuous growth. We move forward with ambition but stay grounded in a culture where people support each other and take pride in what they build.
From our office in Zwijnaarde (Ghent), weu2019re looking for an DevSecOps Engineer whou2019s eager to contribute to delivering seamless, scalable, and reliable integrations that support customers' business processes.

What youu2019ll do...

As a DevSecOps Engineer, youu2019ll help keep our platforms, endpoints, and cloud environments secure throughout their lifecycle. Youu2019ll embed security controls into day-to-day operations, focusing on vulnerability management, patch management, and lifecycle management. Working closely with IT, infrastructure, and development teams, youu2019ll help remediate risks, automate security controls, and ensure our security requirements are effectively implemented in production.

Take ownership of the vulnerability management lifecycle, from discovery and risk-based prioritization to remediation tracking and reporting.

Coordinate patch management across servers, endpoints, containers, and cloud workloads, ensuring agreed security SLAs are met.

Monitor asset and software lifecycles, identifying end-of-life and end-of-support components and coordinating timely upgrades or decommissioning.

Operate and continuously improve security tooling, including monitoring solutions, XDR, SIEM, vulnerability scanners, and configuration baselining tools.

Implement and strengthen security controls across infrastructure-as-code, CI/CD pipelines, and cloud configurations, following recognized baselines such as CIS and NIST.

Investigate operational security events, support incident response, and translate lessons learned into preventive measures.

Turn compliance requirements and risk treatment decisions into actionable operational tasks, runbooks, and automation.

Ensure security controls are measurable, traceable, and properly documented to support internal and external audits.

What you bring...

Youu2019re passionate about cybersecurity and enjoy finding practical ways to make systems more secure without compromising their reliability. You combine a hands-on approach with an automation mindset and enjoy collaborating with different teams to turn security requirements into effective technical solutions.

Hands-on experience with vulnerability management, patch management, and lifecycle management across hybrid on-premises and cloud environments.

A solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure.

Working knowledge of scripting and automation using PowerShell, Bash, or Python, as well as infrastructure-as-code tools such as Terraform and Ansible.