DevSecOps Engineer — Secure CI/CD at Scale

Huxley; Veldhoven; On-site; EUR 65,000 - 90,000; Full time

Job summary

Huxley is seeking a hands-on DevSecOps Engineer to join a central DevSecOps team within a highly innovative software engineering environment. You will scale security practices across the software development lifecycle, improve vulnerability management processes, and help development teams build secure, high‑quality software at scale.

You will own security scanning pipelines, drive shift-left security initiatives, and contribute to ASPM tooling and a platform built with Python, Docker,

Qualifications

• 2+ years of experience in DevOps, DevSecOps, Platform Engineering, or similar roles.
• Strong experience with CI/CD pipelines and security tooling.
• Hands-on experience with Docker, Kubernetes, and Helm.
• Proficient scripting in Bash; familiar with Python and Java/Maven environments.

Responsibilities

• Own and maintain security scanning pipelines within CI/CD environments using Bamboo, Bitbucket, and Azure DevOps.
• Drive shift-left security initiatives and real-time vulnerability reporting for engineering teams.
• Manage Kubernetes base images with security hardening and automated adoption across microservices.
• Administer ASPM tooling and contribute to security lifecycle and vulnerability platforms built with Python, Docker, Kubernetes, and Helm.
• Integrate SAST, DAST, and SCA tooling within CI/CD pipelines and configure Xray/Artifactory policies.

Skills

DevSecOps

CI/CD pipelines

Python

Java & Maven

Docker

Kubernetes

Bash scripting

Git

Automation

Security mindset

AI-assisted development tools

Tools

Bamboo

Bitbucket

Azure DevOps

JFrog Xray

Artifactory

SonarQube

Checkmarx

OWASP ZAP

Trivy

Helm

Job description

Huxley is seeking a hands-on DevSecOps Engineer to join a central DevSecOps team within a highly innovative software engineering environment. You will scale security practices across the software development lifecycle, improve vulnerability management processes, and help development teams build secure, high‑quality software at scale.

You will own security scanning pipelines, drive shift-left security initiatives, and contribute to ASPM tooling and a platform built with Python, Docker,