Senior DevSecOps Engineer: Security-First Code Quality Leader

Alcorconhoy; Alcorcón; On-site; EUR 78,000 - 110,000; Full time

Job summary

Roche is seeking an Expert DevSecOps Engineer to bridge software development and security. You will design robust security frameworks, handle complex requirements, mentor engineers, and collaborate with area architects on long-term security solutions.

The role sits within the Embedded Security & Testing Team under E3, focusing on building secure, automated software pipelines across the enterprise. You will lead initiatives in code quality, SAST, SCA, container and API security, with a hands-on,

Qualifications

• Education: CS/SE degree or equivalent experience.
• 8–10+ years of progressive DevSecOps exp, 3+ yrs building DevSecOps from scratch.
• Hands-on with enablement tools across SDLC (SonarQube, GHAS, Sysdig, Snyk...).

Responsibilities

• Provide expert leadership in DevSecOps, incl. threat modelling and scanning.
• Lead strategic DevSecOps activities and guide less experienced engineers.
• Analyze complex business problems and drive root-cause analysis across teams.
• Balance security compliance with rapid software delivery and developer needs.

Skills

DevSecOps

Threat modelling

SAST

SCA

IaC scanning

Container security

Security testing

Stakeholder management

Mentorship

Tool agnostic

Education

Bachelor's in CS/SE

Master's degree

Tools

SonarQube

GHAS

Sysdig

Snyk

IriusRisk

JFrog Xray

NowSecure

Job description

Roche is seeking an Expert DevSecOps Engineer to bridge software development and security. You will design robust security frameworks, handle complex requirements, mentor engineers, and collaborate with area architects on long-term security solutions.

The role sits within the Embedded Security & Testing Team under E3, focusing on building secure, automated software pipelines across the enterprise. You will lead initiatives in code quality, SAST, SCA, container and API security, with a hands-on,