DevSecOps Engineer - Secure CI/CD & K8s

Coosto; Eindhoven; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

26 days vacation

Home/office hybrid

Home office allowance

Travel reimbursement

Vitality Week & activities

Culture Club activities

Job summary

Coosto is seeking a DevSecOps Engineer to turn our almost greenfield security automation into a scalable, secure CI/CD pipeline in Eindhoven. You’ll partner with SREs to embed security by design across Jenkins pipelines, Kubernetes (EKS), and scanning tools.

You’ll implement guardrails, integrate Snyk/Trivy/Aqua/Grype, and translate findings into actionable developer improvements, enabling faster, safer delivery while shaping our tooling choices.

Qualifications

• Extensive experience with Jenkins (Pipeline as Code).
• Kubernetes (EKS) expertise and ability to isolate workloads.
• Experience integrating security tools (Snyk, Trivy, Aqua, Grype) beyond SonarQube.
• Knowledge of AWS, Terraform, and Ansible to discuss with SREs.
• Builder mentality to define processes and tooling when things are not yet defined.

Responsibilities

• Design and implement security guardrails in Jenkins pipelines to block vulnerabilities before production.
• Secure Kubernetes environments (EKS): image scanning, runtime security, pod security standards.
• Support the SRE team; validate security of scripts and configurations (Terraform/Ansible).
• Add tools for Secret Detection and Software Composition Analysis (SCA) beyond SonarQube.
• Translate security findings into concrete actions for developers to enable faster, safer delivery.

Skills

Jenkins

Kubernetes

Snyk

Trivy

Aqua

Grype

AWS

Terraform

Ansible

Pipeline as Code

Tools

Jenkins

Terraform

Ansible

AWS CLI

Kubernetes

Job description

Coosto is seeking a DevSecOps Engineer to turn our almost greenfield security automation into a scalable, secure CI/CD pipeline in Eindhoven. You’ll partner with SREs to embed security by design across Jenkins pipelines, Kubernetes (EKS), and scanning tools.

You’ll implement guardrails, integrate Snyk/Trivy/Aqua/Grype, and translate findings into actionable developer improvements, enabling faster, safer delivery while shaping our tooling choices.