Devsecops Engineer

buscojobs España; Zaragoza; Presencial; EUR 35.000 - 55.000; Jornada completa

Descripción de la vacante

A leading company in the digital solutions sector is seeking a skilled DevSecOps Engineer to enhance their security framework. In this dynamic role, you will integrate security practices into the software development lifecycle, work closely with Agile teams, and utilize various security tools to ensure system resilience. The ideal candidate will have strong communication skills, experience with cloud security, and a proactive approach to security challenges.

Formación

• Proven experience as a DevSecOps Engineer or similar role.
• Hands-on experience with SAST and DAST tools.
• Experience in an Agile/Scrum environment.

Responsabilidades

• Implement and manage security tools and practices.
• Conduct threat modeling and develop security guides.
• Integrate security into software development lifecycle.

Conocimientos

Agile methodologies

Security testing tools

Threat modeling

Problem-solving

Communication

Herramientas

SonarQube

Burp Suite

Jenkins

GitLab CI

AWS

Docker

Kubernetes

Descripción del empleo

We are seeking a skilled and proactive DevSecOps Engineer to join our dynamic team. The ideal candidate will be passionate about integrating security seamlessly into our software development lifecycle (SDLC) and fostering a security-first culture. You will be responsible for implementing and managing security tools and practices, conducting threat modeling, and ensuring our applications and infrastructure are robust and resilient against emerging threats. This role requires a strong understanding of Agile methodologies, particularly Scrum, and hands-on experience with various security testing tools and techniques.

The ideal candidate will possess a proven track record of successful collaboration within Agile development teams. Strong communication skills, both written and verbal, are key for this role. The ability to build strong working relationships and navigate diverse cultural contexts is essential.

Requirements

• Proven experience as a DevSecOps Engineer, Security Engineer, or a similar role.
• Strong hands-on experience with SAST tools (e.g., SonarQube, Semgrep) and DAST tools (Burp Suite, Acunetix).
• Proficiency in Software Composition Analysis (SCA) tools (Dependency-Track).
• Demonstrable experience in developing and implementing security hardening guides for various technologies.
• Solid understanding and practical application of threat modeling methodologies, particularly STRIDE analysis.
• Experience working in an Agile / Scrum environment and integrating security into agile workflows.
• Familiarity with CI / CD tools (e.g., Jenkins, GitLab CI, AWS DevOps, GitHub Actions).
• Experience with scripting languages for automation.
• Knowledge of cloud security principles and practices ( AWS is a must ; Azure or GCP desirable).
• Understanding of containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security aspects.
• Excellent problem-solving skills and attention to detail.
• Strong communication and interpersonal skills.
• English proficient, both spoken and written

J-18808-Ljbffr