DevSecOps Engineer

Admiral Europe Tech; Cádiz; Presencial; EUR 40.000 - 60.000; Jornada completa

Descripción de la vacante

A leading company in the tech sector is seeking a skilled DevSecOps Engineer to join their dynamic team in Cádiz. In this role, you'll integrate security into the software development lifecycle, manage security tools, and collaborate within Agile teams to foster a security-first culture. The ideal candidate will possess hands-on experience with various security testing tools and methodologies, supporting the company's mission to stay resilient against emerging threats. If you're passionate about security and eager to make an impact, apply now!

Formación

• Proven experience as a DevSecOps Engineer or similar role.
• Hands-on experience with SAST/DAST tools.
• Familiarity with CI/CD tools.

Responsabilidades

• Implement and manage security tools and practices.
• Conduct threat modeling and ensure robust applications.
• Integrate security into Agile workflows.

Conocimientos

Collaboration

Problem Solving

Communication

Attention to Detail

Herramientas

SonarQube

Semgrep

Burp Suite

Acunetix

Dependency-Track

Jenkins

GitLab CI

AWS DevOps

GitHub Actions

Docker

Kubernetes

Descripción del empleo

We are seeking a skilled and proactive DevSecOps Engineer to join our dynamic team. The ideal candidate will be passionate about integrating security seamlessly into our software development lifecycle (SDLC) and fostering a security-first culture. You will be responsible for implementing and managing security tools and practices, conducting threat modeling, and ensuring our applications and infrastructure are robust and resilient against emerging threats. This role requires a strong understanding of Agile methodologies, particularly Scrum, and hands-on experience with various security testing tools and techniques.

The ideal candidate will possess a proven track record of successful collaboration within Agile development teams. Strong communication skills, both written and verbal, are key for this role. The ability to build strong working relationships and navigate diverse cultural contexts is essential.

Requirements

• Proven experience as a DevSecOps Engineer, Security Engineer, or a similar role.
• Strong hands-on experience with SAST tools (e.g., SonarQube, Semgrep) and DAST tools (Burp Suite, Acunetix).
• Proficiency in Software Composition Analysis (SCA) tools (Dependency-Track).
• Demonstrable experience in developing and implementing security hardening guides for various technologies.
• Solid understanding and practical application of threat modeling methodologies, particularly STRIDE analysis.
• Experience working in an Agile / Scrum environment and integrating security into agile workflows.
• Familiarity with CI / CD tools (e.g., Jenkins, GitLab CI, AWS DevOps, GitHub Actions).
• Experience with scripting languages for automation.
• Knowledge of cloud security principles and practices ( AWS is a must ; Azure or GCP desirable).
• Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security aspects.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills.
• English proficient, both spoken and written

J-18808-Ljbffr