DevSecOps Engineer

Bhblasted; Bari; In loco; EUR 40.000 - 60.000; Tempo pieno

Descrizione del lavoro

Join Bhblasted, a forward-thinking company, as a DevSecOps Engineer. You'll help integrate security practices reliably during the software development lifecycle. With at least 2 years of experience, you will play a crucial role in our security-focused development processes, collaborating across teams to enhance our digital footprint. In return, we offer a dynamic work environment, freedom in your role, and a chance to influence meaningful change.

Servizi

Relocation package to move to Caserta

Tax consultancy service for returning Italians

State-of-the-art hardware and software

Innovative office in Caserta

Team events & office snacks

Competenze

• 2-4 years of experience in DevOps with a strong focus on security.
• Experience with tools like SonarQube, OWASP ZAP, Trivy.
• Familiarity with cloud platforms (AWS, Azure, GCP) and security configuration.

Mansioni

• Integrate and automate security controls through the software lifecycle.
• Conduct security scans and collaborate to resolve vulnerabilities.
• Manage security tools and ensure they are functioning correctly.

Conoscenze

Security best practices

Problem-solving orientation

Automation scripting (Python, Bash, PowerShell)

Communication

Collaboration

Formazione

Degree in Computer Science, Engineering, or related field

Strumenti

SonarQube

OWASP ZAP

Jenkins

GitHub Actions

Docker

Kubernetes

Descrizione del lavoro

Bhblasted is a cutting-edge benefit corporation in the tech and digital sector, based in Caserta. A strong commitment to innovation and solid environmental, social, and civic responsibility are the values that guide every choice and activity of our group. Our business units and companies specialize in media management and performance advertising, research and development of advanced e-commerce solutions, and just-in-time and made-to-order clothing production.

To further our mission, we are looking for a DevSecOps Engineer to join our team.

WHAT WE WOULD LIKE YOU TO TAKE CARE OF

Integrate and automate security controls during the development, testing, release, and infrastructure management phases.

Conduct regular security scans (SAST, DAST) and collaborate with the development team to resolve vulnerabilities and security issues.

Configure and maintain CI / CD pipelines with automated security tools (e.g., dependency checks, container scans).

Work with development, operations, and security teams to ensure that security best practices are implemented throughout the software lifecycle.

Manage security tools (e.g., firewalls, WAF, intrusion detection systems) and ensure their proper functioning and updates.

Implement security controls for cloud platforms (AWS, Azure, GCP) and configure threat monitoring tools in cloud environments.

Actively participate in incident response processes, including forensic analysis and threat mitigation.

Promote security awareness among development and operations teams through ongoing training and documentation.

WHAT WE WISH YOU’D BRING WITH

Degree in Computer Science, Engineering, or a related field.

At least 2-4 years of experience in DevOps with a strong focus on security.

Experience with tools such as SonarQube, OWASP ZAP, Trivy, Twistlock, Snyk, etc.

Familiarity with Jenkins, GitLab CI, GitHub Actions, or other CI / CD automation tools and their integration with security tools.

Experience in configuring and managing security on cloud platforms (AWS, Azure, GCP), including identity and access management (IAM) and security monitoring.

Familiarity with Docker, Kubernetes, and container security, including policy and secrets management.

Ability to automate tasks using languages like Python, Bash, or PowerShell.

Familiarity with security best practices (e.g., CIS, NIST) and compliance regulations such as GDPR, PCI-DSS, ISO 27001.

Experience in managing security incidents, emergency response, and forensic analysis.

Excellent communication and collaboration skills, problem-solving orientation, and ability to work in cross-functional teams.

NICE TO HAVE :

Certifications such as AWS Certified Security – Specialty, Certified DevSecOps Professional, or CompTIA Security+.

Previous experience in a product and / or service company;

Experience working in medium-sized teams (5-10).

WHAT WE WOULD LIKE TO OFFER YOU

Join an innovative team in an incredibly exciting growth phase : become part of a Made in Italy success story.

Independence and full autonomy in shaping your work as you prefer and proposing changes that have a real impact.

Location : on-site, hybrid, or remote.

Relocation package to move to Caserta.

Tax consultancy service for Italians who wish to return after years abroad and can benefit from the “Rientro cervelli” program.

Innovative office in the heart of Caserta.

Plenty of team events & office snacks.

State-of-the-art hardware and software to make the magic happen!

D,E&I STATEMENT

At Bhblasted, we celebrate diversity and view it as an opportunity for growth and enrichment. In our organisation, we promote uniqueness and individuality, and we do not discriminate on the basis of disability, neurodiversity, gender identity, biological sex, sexual orientation, marital status, parental status (including pregnancy), age, ethnicity, origin, religion, political ideology, or other characteristics. Our selection processes are based on professional experience, attitude, and the talent of each candidate.

ESG STATEMENT

We are committed to minimising our environmental impact and promoting positive social change. Through the use of recycled, recyclable, and compostable packaging, and monitoring our emissions, waste, and energy consumption, we strive to minimise our footprint. At the same time, we partner with local, national, and international social organisations to create events, collaborations, and charitable initiatives that truly make a difference in our communities and beyond.

Find out more on our career page .

By applying to this job at this company, you're agreeing to the candidate data privacy policy published on the website of the company.#LI-SA1

J-18808-Ljbffr