Senior DevSecOps Engineer: Kubernetes & SBOM Security

Twoday; København; On-site; DKK 900,000 - 1,500,000; Full time

Job summary

Twoday, a leading digital transformation partner in Northern Europe, is seeking a hands-on Senior DevSecOps Engineer to strengthen security across development pipelines, Kubernetes platforms and production environments for one of our major public-sector clients in Copenhagen. This is a permanent role requiring onsite work in Copenhagen.

You will implement automated security controls across CI/CD pipelines, secure the software supply chain, and collaborate with an experienced operations team to

Qualifications

• Hands-on DevSecOps experience implementing security controls in real development and production environments.
• Experience with software supply chain security: SBOM, artefact signing, and verification.
• Experience with CI/CD automation tools (GitLab CI or GitHub Actions) and scripting.
• Kubernetes security expertise including admission control and policy-as-code.
• Familiarity with vulnerability management, incident response, and log/SIEM tooling.
• Experience with GDPR, ISO 27001/27002 and NIS2 is a plus.

Responsibilities

• Implement automated security controls across CI/CD pipelines and IaC scanning.
• Secure software supply chain with SBOM and artifacts signing.
• Enforce least-privilege across pipelines, runners, and environments.
• Apply Kubernetes security controls and secret management.
• Harden Linux/Windows and manage vulnerabilities end-to-end.
• Support runtime threat detection, incident response and forensics.
• Document controls for compliance and audit; transfer knowledge to team.

Skills

DevSecOps

CI/CD automation

Kubernetes security

Security controls implementation

Vulnerability management

Incident response

GDPR compliance

Danish & English fluency

Tools

GitLab CI

GitHub Actions

Terraform

Ansible

Python

Bash

PowerShell

Kyverno

OPA Gatekeeper

Vault

Sigstore/Cosign

Falco

Proxmox

Job description

Twoday, a leading digital transformation partner in Northern Europe, is seeking a hands-on Senior DevSecOps Engineer to strengthen security across development pipelines, Kubernetes platforms and production environments for one of our major public-sector clients in Copenhagen. This is a permanent role requiring onsite work in Copenhagen.

You will implement automated security controls across CI/CD pipelines, secure the software supply chain, and collaborate with an experienced operations team to