Elite DevSecOps Engineer - Secure SDLC Architect

Roche; Madrid; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Roche is seeking an Expert DevSecOps Engineer to bridge software and security engineering, designing robust security frameworks and guiding complex stakeholder landscapes. You will mentor junior engineers and collaborate with an area architect to define long-term security-oriented software architecture.

The role sits within Engineering Excellence & Experience (E3), specifically the Embedded Security & Testing Team, delivering DevSecOps capabilities across SDLC, including PoCs and internal

Formación

• Education: Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related technical field (or equivalent practical experience)
• DevSecOps Expertise: 8–10+ years of progressive experience, including 3+ years building DevSecOps frameworks from scratch
• Hands-on tools agnostic expert for DevSecOps enablement tooling across SDLC (e.g., SonarQube, GHAS, Sysdig, Snyk, IriusRisk, JFrog Xray, NowSecure)

Responsabilidades

• Provide expert-level leadership and strategic guidance in DevSecOps, including Threat Modelling, Code Quality, SAST, Secret Scanning, Software Composition Analysis, IaC Scanning, License Compliance, Dependency Management, Container Image Scanning, API Security and Container Runtime Scanning
• Define Software Security best practices ensuring consistency, traceability, and alignment with enterprise standards
• Lead DevSecOps efforts on strategic activities and mentor less experienced team members

Conocimientos

DevSecOps Expertise

Threat Modelling

SAST

SCA

Container Security

IaC Scanning

Mentorship

Stakeholder Management

Educación

Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related technical field

Herramientas

SonarQube

GHAS

Sysdig

Snyk

IriusRisk

JFrog Xray

NowSecure

Descripción del empleo

Roche is seeking an Expert DevSecOps Engineer to bridge software and security engineering, designing robust security frameworks and guiding complex stakeholder landscapes. You will mentor junior engineers and collaborate with an area architect to define long-term security-oriented software architecture.

The role sits within Engineering Excellence & Experience (E3), specifically the Embedded Security & Testing Team, delivering DevSecOps capabilities across SDLC, including PoCs and internal