DevSecOps Engineer

Huxley; Veldhoven; On-site; EUR 65,000 - 90,000; Full time

Job summary

Huxley is seeking a hands-on DevSecOps Engineer to join a central DevSecOps team within a highly innovative software engineering environment. You will scale security practices across the software development lifecycle, improve vulnerability management processes, and help development teams build secure, high‑quality software at scale.

You will own security scanning pipelines, drive shift-left security initiatives, and contribute to ASPM tooling and a platform built with Python, Docker,

Qualifications

• 2+ years of experience in DevOps, DevSecOps, Platform Engineering, or similar roles.
• Strong experience with CI/CD pipelines and security tooling.
• Hands-on experience with Docker, Kubernetes, and Helm.
• Proficient scripting in Bash; familiar with Python and Java/Maven environments.

Responsibilities

• Own and maintain security scanning pipelines within CI/CD environments using Bamboo, Bitbucket, and Azure DevOps.
• Drive shift-left security initiatives and real-time vulnerability reporting for engineering teams.
• Manage Kubernetes base images with security hardening and automated adoption across microservices.
• Administer ASPM tooling and contribute to security lifecycle and vulnerability platforms built with Python, Docker, Kubernetes, and Helm.
• Integrate SAST, DAST, and SCA tooling within CI/CD pipelines and configure Xray/Artifactory policies.

Skills

DevSecOps

CI/CD pipelines

Python

Java & Maven

Docker

Kubernetes

Bash scripting

Git

Automation

Security mindset

AI-assisted development tools

Tools

Bamboo

Bitbucket

Azure DevOps

JFrog Xray

Artifactory

SonarQube

Checkmarx

OWASP ZAP

Trivy

Helm

Job description

We are looking for a hands‑on DevSecOps Engineer to join a central DevSecOps team within a highly innovative software engineering environment. This is an excellent opportunity for a DevOps professional with a strong automation mindset and a genuine interest in security to further develop their DevSecOps expertise.

You will work alongside experienced security engineers to scale security practices across the software development lifecycle, improve vulnerability management processes, and help development teams build secure, high‑quality software at scale.

Responsibilities

• Own and maintain security scanning pipelines within CI/CD environments using Bamboo, Bitbucket, and Azure DevOps.
• Drive shift‑left security initiatives and implement near real‑time vulnerability reporting for engineering teams.
• Manage and govern Kubernetes golden base images, ensuring security hardening, compliance, and automated adoption across microservices.
• Act as administrator and business owner of Application Security Posture Management (ASPM) tooling.
• Contribute to an internally developed lifecycle and vulnerability management platform built with Python, Docker, Kubernetes, and Helm.
• Integrate and maintain SAST, DAST, and SCA tooling within CI/CD pipelines.
• Configure and manage JFrog Xray and Artifactory security scanning policies and integrations.
• Support container and Kubernetes security best practices.
• Collaborate with Development, Operations, and Security teams to improve secure engineering practices and security awareness.

Required Skills & Experience

• 2+ years of experience in DevOps, DevSecOps, Platform Engineering, or similar roles.
• Strong experience with CI/CD pipelines.
• Experience with Bamboo, Bitbucket and/or Azure DevOps.
• Python development experience.
• Working knowledge of Java and Maven build environments.
• Hands‑on Docker, Kubernetes, and Helm experience.
• Knowledge of security tooling such as SonarQube, Checkmarx, OWASP ZAP, BlackDuck or Trivy.
• Experience with JFrog Xray and Artifactory.
• Bash scripting and Git experience.
• Interest in AI‑assisted development tools, including GitHub Copilot and AI agents.

Nice to Have

• Knowledge of security frameworks such as CIS, MITRE, NIST, ISO27001, or EU CRA.
• ASPM tooling experience.
• HashiCorp Vault or GitGuardian experience.
• Terraform and/or Ansible.
• Splunk or ELK.
• Security certifications such as CISSP or Security+.

Key Competencies

• Strong stakeholder management and communication skills.
• Passion for automation and security.
• Continuous learning mindset.
• Pragmatic problem‑solving approach.
• Team‑oriented and delivery‑focused attitude.