DevSecOps Engineer: SSDLC & CI/CD Security Automation

GMV; Tres Cantos; Híbrido; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Relocation package

Flexible hours

Language learning support

Wellbeing program

Descripción de la vacante

GMV invites you to join an Application Security and SSDLC service, helping implement and evolve a DevSecOps model by automating security controls from the earliest development stages. You will integrate SAST/SCA into CI/CD pipelines, configure and optimize security tools, define Security Gates, analyze vulnerabilities, and automate with APIs using Python, PowerShell, or Bash.

This role offers a hybrid work arrangement, ongoing training, and opportunities to collaborate with development teams

Formación

• Experience in Application Security and DevSecOps, integrating SAST/SCA into CI/CD environments.
• Knowledge of secure SDLC and automated controls.
• Familiarity with vulnerability analysis and remediation best practices.

Responsabilidades

• Integrate and automate SAST/SCA controls into CI/CD pipelines.
• Configure, administer and optimize security tools and onboarding applications into the DevSecOps model.
• Define and maintain Security Gates and scanning strategies.
• Analyze vulnerabilities, manage false positives and tune rules.
• Develop automation and integrations using APIs and scripting (Python/PowerShell/Bash).
• Troubleshoot issues across security tools, pipelines and integrations.
• Support developers with vulnerability remediation and revalidation.
• Contribute to SSDLC controls and secure credential management.

Conocimientos

CI/CD

SAST/SCA

Git

OWASP Top 10

Vulnerability analysis

Security Gates

APIs & scripting

Docker/Kubernetes

Checkmarx/Checkmarx One

Fortify

SonarQube

Azure DevOps

Jenkins

GitHub Actions

GitLab CI/CD

Herramientas

Checkmarx

Checkmarx One

Fortify

SonarQube

Azure DevOps

Jenkins

GitHub Actions

GitLab CI/CD

Descripción del empleo

GMV invites you to join an Application Security and SSDLC service, helping implement and evolve a DevSecOps model by automating security controls from the earliest development stages. You will integrate SAST/SCA into CI/CD pipelines, configure and optimize security tools, define Security Gates, analyze vulnerabilities, and automate with APIs using Python, PowerShell, or Bash.

This role offers a hybrid work arrangement, ongoing training, and opportunities to collaborate with development teams