DevSecOps Engineer: Automate Secure CI/CD & SSDLC

GMV Spain; Tres Cantos; Híbrido; EUR 50.000 - 80.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Teleworking up to 8 weeks per year

Flexible start and finish times

Relocation package

Descripción de la vacante

GMV Spain is seeking a cybersecurity professional to join its Application Security and SSDLC service. The role focuses on deploying an automated DevSecOps model across development teams, integrating security controls early in the lifecycle and driving scalable security practices.

You will help automate tooling, configure security gates, and support developers in remediation, with a strong emphasis on collaboration in a technical environment.

Formación

• Experience implementing SAST/SCA in CI/CD environments and securing SDLC.
• Knowledge of vulnerability analysis (OWASP Top10, CWE, CVE/CVSS).
• Experience with APIs, scripting languages, and tool integrations.

Responsabilidades

• Integrate SAST/SCA controls into CI/CD pipelines.
• Configure and optimize security tools and onboarding of applications into DevSecOps.
• Define Security Gates and scanning strategies; monitor vulnerabilities.

Conocimientos

CI/CD

Git

OWASP Top10

SSDLC

APIs

Scripting

Credentials security

Code analysis

Herramientas

Checkmarx

Checkmarx One

Fortify

SonarQube

Azure DevOps

Jenkins

GitHub Actions

GitLab CI/CD

Descripción del empleo

GMV Spain is seeking a cybersecurity professional to join its Application Security and SSDLC service. The role focuses on deploying an automated DevSecOps model across development teams, integrating security controls early in the lifecycle and driving scalable security practices.

You will help automate tooling, configure security gates, and support developers in remediation, with a strong emphasis on collaboration in a technical environment.