DevOps engineer in application security

Capitole Consulting; Barcelona; Hybrid; EUR 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Free private health insurance

Individual training budget €1,200

Job summary

Capitole Consulting ищет старшего DevOps инженера с опытом 7+ лет и сильной экспертизой в Azure для работы в Барселоне над крупным международным клиентом. Ваша задача — продвигать DevSecOps, внедрять SAST через SonarQube, строить шаблоны и инфраструктуру в Azure, а также развивать CI/CD и IaC.

Работа в гибридном формате: 2 дня в офисе, остальное время удаленно, с бюджетом на обучение и доступом к профессиональным сообществам.

Qualifications

• Образование в области информатики или сопутствующей дисциплины, или эквивалентный практический опыт.

Responsibilities

• Внедрять DevSecOps практики внутри команд разработки и интегрировать анализ безопасности (SAST) в CI/CD пайплайны.
• Разрабатывать и поддерживать шаблоны конфигураций SonarQube Advanced Security.
• Сопровождать интеграцию шаблонов безопасности в CI/CD и обеспечивать их корректное применение.
• Помогать командам по вопросам безопасности и конфигураций пайплайнов, давать разъяснения по ложным позитивам.
• Генерировать отчеты по уязвимостям, определять их природу и критичность.
• Разрабатывать инфраструктуру в Azure как код и автоматизировать сборку/развертывание, мониторинг и оповещение.
• Документировать решения и передавать знания командам.

Skills

DevOps

Cloud Engineering

CI/CD

SAST

IaC

Automation

Scripting

Education

Степень в информатике/софтверной инженерии

Tools

Azure DevOps

Azure

OpenShift

SonarQube

Terraform

PowerShell

Bash

TypeScript

Job description

Описание: We are looking for a Senior DevOps Engineer with more than 7 years of experience and strong expertise within the Azure ecosystem to join our team in Barcelona, supporting a major international client.

Задачи:

• Your mission will be to drive the adoption of DevSecOps practices across application teams, integrating security analysis capabilities (SAST with SonarQube) into their CI/CD pipelines and supporting them throughout the vulnerability remediation process.
• Build and maintain templates for SonarQube Advanced Security configurations.
• Collaborate with application owners, guiding them through the integration of security templates into their CI/CD pipelines and ensuring proper implementation.
• Support development teams by resolving questions and issues related to security and pipeline configurations.
• Generate reports on security vulnerabilities identified through SonarQube, assessing their nature and severity.
• Communicate findings to application teams, helping them identify false positives and guiding them through investigation and remediation activities.
• Follow up with teams to ensure remediation plans are progressing and provide regular status reporting.
• Design, build, and manage scalable cloud infrastructure within Azure environments.
• Develop automated CI/CD pipelines, Infrastructure as Code (IaC) templates, scripting modules, and monitoring and alerting solutions.
• Produce technical documentation and facilitate knowledge transfer across teams.

Требования:

• Degree in Computer Science, Software Engineering, or a related field (or equivalent practical experience).
• 5+ years of experience in Software Engineering.
• 5+ years of proven experience in DevOps, Cloud Engineering, or similar roles Azure DevOps Azure Application Insights, Alerts, and Logic Apps OpenShift PowerShell, Bash, or TypeScript scripting DevSecOps practices, CI/CD strategies, and branching strategies SAST (Static Application Security Testing) Infrastructure as Code (IaC) Experience managing large-scale Azure environments.
• Strong background in automation and scripting within enterprise environments.
• Professional working proficiency in English.
• They will have access to confidential information related to Capitole Consulting and the project they are assigned to.
• They must comply with the information security policies, as well as the internal policies and procedures of both Capitole Consulting and the client.
• They will be required to sign a Non-Disclosure Agreement (NDA).

Условия:

• Individual training budget of €1,200 (languages, books, certifications, etc.).
• Flexible remuneration package.
• Hybrid model: 2 days per week at our city center office, remote the rest of the week.
• Discounts at sports centers (AndJoy).
• Free private health insurance.
• Monthly follow-up meetings with your manager for continuous feedback.
• Access to our Technology Communities, where you can share knowledge, learn from colleagues, and grow professionally.