Platform Security Engineer (SAST, DAST, Container Security) for NATO with security clearance

WLG; Brunssum; On-site; EUR 70,000 - 110,000; Full time

Job summary

WLG in Brunssum, Netherlands, is seeking a senior DevSecOps engineer to design and run secure CI/CD pipelines, automation and platforms behind critical communications systems. The role is on-premises and security-by-default, with emphasis on automation and robust tooling.

You will implement IaC, container orchestration with Docker and Kubernetes, and run SAST/DAST, secret management and vulnerability scanning, while building monitoring and observability into the stack.

Qualifications

• A degree in computing, software engineering or cybersecurity, or equivalent experience.
• Minimum 5 years in DevSecOps, DevOps, platform engineering or infrastructure automation.
• Proficiency with GitLab, Jenkins or Azure DevOps, plus Terraform, Ansible or Puppet and Python, Bash or PowerShell.
• Experience with Docker and Kubernetes, container security and image management.
• Solid Linux and Windows Server knowledge, virtualization, and monitoring tools like Prometheus, Grafana or Elastic.
• At least one of CKA, Terraform Associate or DCA, and a security certification such as Security+, GSEC or ISC2 CC.

Responsibilities

• Designing, building and maintaining CI/CD pipelines with security testing built in
• Developing Infrastructure as Code and automating provisioning, configuration and deployment
• Deploying and supporting containerised services on Docker and Kubernetes
• Running SAST, DAST and dependency scanning, secrets management and vulnerability management
• Setting up monitoring, logging and observability
• Writing deployment procedures, architecture diagrams, security artefacts and handover documentation

Skills

CI/CD pipelines

Security testing

Infrastructure as Code

Container automation

Monitoring & observability

Documentation

Education

Degree in computing / software engineering / cybersecurity

Equivalent experience

Tools

GitLab

Jenkins

Azure DevOps

Terraform

Ansible

Puppet

Python

Bash/PowerShell

Prometheus

Grafana

Elastic

CKA

Terraform Associate

DCA

Security Certifications

Job description

Security built into the pipeline, not bolted on at the end.

A multinational defence organisation in Brunssum is delivering new communication and information systems and needs a senior DevSecOps engineer to design and run the pipelines, automation and platforms behind them, all on-premises and all secure by default.

What You Would Be Doing

• Designing, building and maintaining CI/CD pipelines with security testing built in


• Developing Infrastructure as Code and automating provisioning, configuration and deployment


• Deploying and supporting containerised services on Docker and Kubernetes


• Running SAST, DAST and dependency scanning, secrets management and vulnerability management


• Setting up monitoring, logging and observability


• Writing deployment procedures, architecture diagrams, security artefacts and handover documentation

What you would bring

• A degree in computing, software engineering or cybersecurity, or equivalent experience


• 5 years in DevSecOps, DevOps, platform engineering or infrastructure automation


• GitLab, Jenkins or Azure DevOps, plus Terraform, Ansible or Puppet and Python, Bash or PowerShell


• Docker and Kubernetes, container security and image management


• Linux and Windows Server, virtualisation, and tools such as Prometheus, Grafana or Elastic


• At least one of CKA, Terraform Associate or DCA, and one security certification such as Security+, GSEC or ISC2 CC

Why this one is worth a look

Modern engineering in a secure on-premises setting, where good automation makes a visible difference from day one.