DevSecOps Engineer

Moventas Wind Ltd; Helsinki; Hybrid; EUR 55,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Shareholder opportunity

Office in Pasila, Helsinki

Job summary

TalentAdore is seeking a DevSecOps Engineer to own two critical domains—infrastructure reliability and technical security—across a cloud-based platform. You will shape deployment patterns, embed security into CI/CD, and ensure audit-ready documentation while collaborating with a lean R&D team in Helsinki.

You will work with GCP and AWS, Kubernetes, GitLab, Docker, and modern security tooling, building a security-first engineering culture and scalable operations. Fluency in English is essential.

Qualifications

• Minimum 6 years of hands-on experience in infrastructure management, CI/CD pipelines, containerisation, Kubernetes, monitoring, and system reliability in a cloud environment.
• Hands-on DevSecOps implementing security tooling in CI/CD pipelines and development workflows.
• Experience in ISO 27001 environments, ISMS documentation, and audit preparation.
• Fluent in English, both written and spoken.

Responsibilities

• Own two critical domains: infrastructure reliability and technical security end to end.
• Manage cloud infrastructure (GCP with some AWS), implement audit logging and ensure system observability.
• Unify deployment patterns using CI/CD pipelines and tooling (Kustomize, GitLab CI/CD).
• Integrate security tooling into production pipelines: static analysis, dependency scanning, container security, secrets management.
• Enhance monitoring, logging, metrics, and tracing for full visibility across the stack.
• Drive cost efficiency through automated scalability and resource optimization.

Skills

DevSecOps

Infrastructure as code

Kubernetes

ISO 27001

Security tooling

Cloud platforms (GCP/AWS)

Tools

Terraform

Kustomize

GitLab CI/CD

Docker

Prometheus/Grafana

Snyk

SonarQube

Terragrunt

Job description

At TalentAdore, we are building one of Europe's leading human-centred AI companies. Every year, more than 1.5 million people experience recruitment through TalentAdore. Everything we do aims to bring the human touch back to recruitment. Our top‑of‑the‑game technology frees up people's time to focus on what really matters: meaningful conversations and authentic connections.

We are now looking for a DevSecOps Engineer to become the dedicated internal owner of our infrastructure reliability and technical security – two areas that are critical to how we build, operate and protect our product. If you are passionate about building robust systems, embedding security into engineering culture, and taking real ownership of a technical domain from day one – keep reading.

Own the infrastructure and security that powers AI-native recruitment

AI is transforming every industry, yet very few software companies are truly AI‑native. AI has been a fundamental part of TalentAdore for more than a decade – long before the rise of LLMs. Here, you will work at the intersection of infrastructure reliability and information security, ensuring that the systems powering our product are robust, observable, and built with security embedded from the ground up.

Based in Finland, you will join a lean and highly capable R&D team of 11 professionals and take full internal ownership of our DevOps and technical security practices. You will work closely with engineers, product, and leadership – building structure, creating clarity, and raising the bar for how we operate and secure our systems. This is not a role where you inherit a fully established function. It is a role where you build one.

• Full DevOps ownership – You become TalentAdore's dedicated internal owner of infrastructure reliability, deployment processes, CI/CD pipelines, and system performance – taking over from an external provider and establishing clear, lasting internal ownership.
• Technical security leadership – You own the implementation and maintenance of our technical security controls: security scanning in pipelines, secrets management, vulnerability management, access control, and container security. You are the person who makes sure that what our ISMS says we do, we actually do.
• Audit‑ready technical documentation – You own the technical evidence that keeps us ISO 27001 certified: architecture diagrams, data flows, access control documentation, security scan results, and runbooks – maintained continuously, not only at audit time.
• DevSecOps culture – You embed security‑first thinking into R&D's everyday ways of working, acting as a trusted technical partner to engineers rather than a gatekeeper.
• Hybrid work model – You enjoy hybrid flexibility with collaborative days at our brand‑new office in Pasila, Helsinki.
• Compensation & ownership – We believe in a total compensation model which includes a fixed base salary of 4600‑5400 EUR per month, benefits, and the opportunity to become a shareholder in TalentAdore.

What you will be doing

You will make a real difference by owning two critical domains – infrastructure reliability and technical security – end to end. As part of the role, you will:

• Infrastructure management & reliability – You establish full internal control over TalentAdore's cloud infrastructure (GCP, with some AWS legacy), implement audit logging for infrastructure changes, and ensure our systems are well‑documented, observable, and resilient. You own uptime, incident response, and the continuous improvement of our deployment processes.
• CI/CD and deployment excellence – You improve and unify our deployment patterns using Kustomize and GitLab CI/CD, optimise our build and testing processes through Docker image reuse, manage our private container registry, and integrate test and build results into our pipelines.
• Technical security ownership – You integrate security tooling directly into every production pipeline – static code analysis, dependency scanning, container security, secrets detection, and automated security testing. You own secrets management end to end, ensuring secrets are removed from code and a proper practice is in place.
• Observability & monitoring – You enhance our monitoring and alerting capabilities, implement comprehensive logging, metrics, and tracing, and enable cross‑correlation of system events so that the team has full visibility into what is happening across our infrastructure.
• Resource optimisation & scalability – You implement automated scalability to reduce costs, fine‑tune services to decrease resource consumption, and establish resource prediction and planning capabilities.
• Technical security documentation & audit support – You produce and maintain high‑quality technical documentation – architecture overviews, data flow diagrams, security control descriptions, runbooks, and playbooks – and own the technical evidence required for our annual ISO 27001 recertification.
• DevSecOps culture building – You work alongside the R&D team to embed security‑first engineering practices into daily ways of working, communicating technical risk clearly and influencing without direct authority.

We work with tools and technologies including GCP and AWS, Kubernetes, Kustomize, GitLab, Docker, Prometheus/Grafana, secrets management tooling, and security scanning tools such as Snyk, Dependabot, or SonarQube – we value clear understanding and evidence of experience over tool‑specific certifications, and we are tool‑agnostic where the fundamentals are strong.

• Hands‑on DevOps and SRE experience: You have a minimum of 6 years of hands‑on experience in infrastructure management, CI/CD pipelines, containerisation, Kubernetes, monitoring, and system reliability in a cloud environment. Linux and shell scripting are second nature to you.
• DevSecOps implementation: You have proven, hands‑on experience embedding security tooling and practices directly into CI/CD pipelines and development workflows – including static code analysis, dependency scanning, container security, secrets detection, and automated security testing.
• Information security principles: You have a solid practical understanding of core information security concepts – vulnerability management, access control, secrets management, and patch management – applied at an infrastructure and platform level.
• ISO 27001 operational experience: You have worked within an ISO 27001 certified environment, contributed to maintaining and updating ISMS control documentation, and actively participated in audit preparation and recertification processes. You understand what this involves in practice, not just in theory.
• Technical security documentation: You produce and maintain high‑quality security and infrastructure documentation – architecture overviews, runbooks, playbooks, security guidelines, and audit evidence – as a natural part of how you work, not as an afterthought.
• Collaboration and influencing skills: You communicate technical risk in business terms, build trust across technical and non‑technical stakeholders, and drive security culture across a team without direct managerial authority.
• English fluency: You are fully fluent in English, both written and spoken, and communicate with clarity and confidence.

Your background

We imagine you have:

• Worked in a SaaS, B2B software, or similarly regulated technical environment where both system reliability and compliance are taken seriously.
• Taken ownership of infrastructure or security domains in a lean, scale‑up environment – building structure from scratch rather than inheriting a fully established function.
• Transitioned from or combining a core DevOps or SRE background with meaningful security or compliance responsibilities – profiles who have grown from backend or full‑stack engineering into DevOps and then into broader security ownership are particularly interesting to us.
• Experience taking over from or replacing an external service provider, and doing so in a way that builds trust and creates continuity.

But we know great people grow in many ways – if this role speaks to you, let’s chat.

• Infrastructure as Code – Experience with Terraform, Terragrunt, Ansible, or equivalent IaC tooling, with an automation‑first mindset.
• Network troubleshooting – Solid understanding of the OSI model and practical experience diagnosing network‑level issues in cloud environments.
• Penetration testing – Exposure to penetration testing concepts or practice.
• GDPR – Practical understanding of GDPR requirements and their implications for a SaaS company handling personal data.
• NIS2 awareness – Familiarity with NIS2 requirements and their implications for a SaaS or tech company operating in Finland and the EU.
• ISO 27001 governance - experience with Information Security Management System maintenance is a welcome bonus. The deeper your knowledge, the more you can contribute alongside our existing InfoSec team.

Why work with TalentAdore?

A meaningful mission: Your work will transform recruitment by helping companies deliver a more humane, candidate‑friendly hiring experience. Every improvement you make helps people find jobs through a fairer and more respectful process – creating a positive impact that extends far beyond individual hiring decisions.

A place to grow and make a difference: AI evolves every week, and so do we. Experimentation, continuous learning, and sharing knowledge are part of our everyday work. If you want to stay at the forefront of applied AI, we provide endless opportunities to take ownership and contribute in meaningful ways.

An amazing team: You will be surrounded by talented professionals who bring both excellence and heart to the table. We set a high bar, help each other succeed, and genuinely enjoy working together. Here, your voice is heard, genuine friendships are built, and collaboration fuels success.

Flexibility & balanced life: We value the flexibility of remote work to ensure you can maintain a healthy balance between work and the other important aspects of life, but we also believe it is most effective when paired with regular face‑to‑face collaboration. Our brand‑new office in Pasila, Helsinki, offers a great space to connect with your colleagues.

Benefits: We offer a wide range of benefits, including sports, culture, and commuter benefits, comprehensive leisure‑time and travel insurance, coaching services, group training at our office gym, massages, and regular team events. Please visit our career page for an overview of our benefits.

Compensation & Ownership: We believe in a compensation model which includes a fixed salary, benefits, and the opportunity to become a shareholder in TalentAdore. The fixed salary for this position is 4600-5400 per month, determined based on your skills, background, and experience. Because we believe in building long‑term success together, we provide an opportunity to acquire shares, giving you a direct stake in TalentAdore's success and future growth.

Ready to jump in?

TalentAdore is a global HR technology company on a mission to bring the human touch back to recruitment. Our AI‑assisted recruitment software, TalentAdore Hire, removes bottlenecks in recruitment one by one. This frees up time to focus on the moments that matter and create an exceptional candidate experience. As a result, candidates feel heard and understood, and they act as your brand ambassadors.