Devsecops Engineer

buscojobs España; Cádiz; Presencial; EUR 35.000 - 60.000; Jornada completa

Descripción de la vacante

A leading company is seeking a skilled DevSecOps Engineer to join their dynamic team. The successful candidate will be instrumental in integrating security into the software development lifecycle while collaborating closely with Agile teams and utilizing various security tools. This role involves not just technical skills but also strong communication capabilities to foster a security-first culture.

Formación

• Proven experience as a DevSecOps Engineer or similar role.
• Strong experience with SAST and DAST tools.
• Familiarity with cloud security principles and practices.

Responsabilidades

• Implement and manage security tools in the SDLC.
• Conduct threat modeling and security assessments.
• Collaborate within Agile development teams.

Conocimientos

Security tools

Agile methodologies

Communication

Problem-solving

Herramientas

SonarQube

Burp Suite

Jenkins

Docker

Descripción del empleo

We are seeking a skilled and proactive DevSecOps Engineer to join our dynamic team. The ideal candidate will be passionate about integrating security seamlessly into our software development lifecycle (SDLC) and fostering a security-first culture. You will be responsible for implementing and managing security tools and practices, conducting threat modeling, and ensuring our applications and infrastructure are robust and resilient against emerging threats. This role requires a strong understanding of Agile methodologies, particularly Scrum, and hands-on experience with various security testing tools and techniques.

The ideal candidate will possess a proven track record of successful collaboration within Agile development teams. Strong communication skills, both written and verbal, are key for this role. The ability to build strong working relationships and navigate diverse cultural contexts is essential.

Requirements

• Proven experience as a DevSecOps Engineer, Security Engineer, or a similar role.
• Strong hands-on experience with SAST tools (e.g., SonarQube, Semgrep) and DAST tools (Burp Suite, Acunetix).
• Proficiency in Software Composition Analysis (SCA) tools (Dependency-Track).
• Demonstrable experience in developing and implementing security hardening guides for various technologies.
• Solid understanding and practical application of threat modeling methodologies, particularly STRIDE analysis.
• Experience working in an Agile / Scrum environment and integrating security into agile workflows.
• Familiarity with CI / CD tools (e.g., Jenkins, GitLab CI, AWS DevOps, GitHub Actions).
• Experience with scripting languages for automation.
• Knowledge of cloud security principles and practices ( AWS is a must ; Azure or GCP desirable).
• Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security aspects.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills.
• English proficient, both spoken and written

J-18808-Ljbffr

J-18808-Ljbffr