DevSecOps Engineer

TalentAdore; Helsinki; Hybrid; EUR 51,000 - 60,000; Full time

Benefits offered by this job

Shareholder opportunity

Hybrid flexibility

Brand-new office in Pasila

Job summary

TalentAdore, a leading Europe-based human-centred AI company, is seeking a DevSecOps Engineer to own our infrastructure reliability and security. You will build and codify the internal DevSecOps function, moving from external support to full internal ownership.

You will lead CI/CD pipelines, implement security tooling in pipelines, manage secrets and container security, and produce audit-ready architecture diagrams and data flows.

Qualifications

• 6+ years hands-on DevOps or SRE in a cloud environment.
• Proven experience embedding security tooling into CI/CD pipelines (SAST, dependency scanning, secrets detection, container security).
• Solid understanding of information security principles applied at infrastructure level.
• ISO 27001 operational experience – audit preparation, ISMS documentation, technical controls.
• Strong technical documentation skills and the ability to influence without authority.
• Full fluency in English.

Responsibilities

• Full DevOps ownership: infrastructure reliability, CI/CD pipelines, deployment processes, and system performance.
• Security leadership: security scanning in pipelines, secrets management, vulnerability management, access control, and container security.
• Audit-ready technical documentation: architecture diagrams, data flows, access control documentation and security scan results.
• DevSecOps culture: embedding security-first thinking into R&D's everyday work, acting as a trusted technical partner.

Skills

DevOps

SRE

Cloud environments

Security tooling in CI/CD

ISO 27001

Technical documentation

English fluency

Tools

GCP

Kubernetes

GitLab

Docker

Snyk

SonarQube

Job description

At TalentAdore, we are building one of Europe's leading human-centred AI companies. Every year, more than 1.5 million people experience recruitment through TalentAdore. AI has been a fundamental part of what we do for more than a decade – long before the rise of LLMs.

We are now looking for a DevSecOps Engineer to become the dedicated internal owner of our infrastructure reliability and technical security. This is not a role where you inherit a fully established function. It is a role where you build one.

What you will own

• Full DevOps ownership – Infrastructure reliability, CI/CD pipelines, deployment processes and system performance, taking over from an external provider and establishing lasting internal ownership
• Technical security leadership – Security scanning in pipelines, secrets management, vulnerability management, access control and container security. You are the person who makes sure that what our ISMS says we do, we actually do
• Audit-ready technical documentation – Architecture diagrams, data flows, access control documentation and security scan results – maintained continuously, not only at audit time
• DevSecOps culture – Embedding security-first thinking into R&D's everyday ways of working, acting as a trusted technical partner rather than a gatekeeper

Fixed salary: 4,600 – 5,400 EUR/month

+ benefits + opportunity to become a shareholder

We are looking for someone with

• 6+ years of hands-on DevOps or SRE experience in a cloud environment
• Proven experience embedding security tooling into CI/CD pipelines (SAST, dependency scanning, secrets detection, container security)
• Solid understanding of information security principles applied at infrastructure level
• ISO 27001 operational experience – audit preparation, ISMS documentation, technical controls
• Strong technical documentation skills and the ability to influence without authority
• Full fluency in English

We work with GCP, Kubernetes, Kustomize, GitLab, Docker, Prometheus/Grafana and security scanning tools such as Snyk or SonarQube – we are tool-agnostic where the fundamentals are strong.

A meaningful mission, an amazing team, hybrid flexibility, a brand-new office in Pasila, comprehensive benefits, and a real opportunity to take ownership of a critical domain from day one.