DevSecOps Engineer: Secure Cloud, CI/CD & Automation

Sofico; Oost-Vlaanderen; Hybrid; EUR 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Company car or mobility budget

Meal vouchers

Hospitalization insurance

Bike leasing

Job summary

SOFICO is looking for a DevSecOps Engineer in Ghent to strengthen our security posture across hybrid on-premises and cloud environments. You’ll own vulnerability management, drive patch coordination across servers and containers, and continuously improve security tooling and automation.

You’ll work with IT, infrastructure, and development teams to implement CIS and NIST baselines, while translating risk findings into actionable tasks and playbooks.

Qualifications

• Hands-on experience with vulnerability management, patch management, and lifecycle management across hybrid on-premises and cloud environments.
• A solid understanding of operating systems, networking, container platforms, and cloud security, particularly Azure.
• Working knowledge of scripting and automation using PowerShell, Bash, or Python, as well as infrastructure-as-code tools such as Terraform and Ansible.
• Familiarity with cybersecurity frameworks such as ISO 27001 and NIS2, and the ability to translate requirements into operational controls.
• Knowledge of security benchmarks, including CIS Benchmarks, and the ability to identify and implement improvements based on maturity assessments.
• Experience with SIEM/EDR tooling and using threat intelligence to prioritize remediation activities.
• Fluency in English; additional languages are a plus.

Responsibilities

• Take ownership of vulnerability management lifecycle from discovery to remediation reporting.
• Coordinate patch management across servers, endpoints, containers, and cloud workloads.
• Monitor asset and software lifecycles, coordinating upgrades or decommissioning.
• Operate and improve security tooling including SIEM, XDR, and vulnerability scanners.
• Implement security controls in CI/CD pipelines and cloud configurations.
• Investigate security events and support incident response.
• Translate risk decisions into runbooks and automation.
• Ensure controls are measurable and auditable.

Skills

Vulnerability management

Patch management

Lifecycle management

Azure

Scripting (PowerShell/Bash/Python)

CI/CD security

ISO 27001 & NIS2 knowledge

English fluency

Tools

Terraform

Ansible

XDR

SIEM

Vulnerability scanners

Job description

SOFICO is looking for a DevSecOps Engineer in Ghent to strengthen our security posture across hybrid on-premises and cloud environments. You’ll own vulnerability management, drive patch coordination across servers and containers, and continuously improve security tooling and automation.

You’ll work with IT, infrastructure, and development teams to implement CIS and NIST baselines, while translating risk findings into actionable tasks and playbooks.