Senior Security Engineer — DevSecOps & SecOps Lead

Nebul; Leiden; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Nebul, based in the Netherlands, is building Europe’s sovereign AI cloud. We seek a Medior/Senior Security Engineer to join as our first dedicated security engineer and help mature our security posture with the CISO and engineering teams.

You’ll split your time around 70% DevSecOps and 30% SecOps, embedding security into CI/CD, Kubernetes, and our infrastructure, while strengthening vulnerability management, monitoring, and incident response as Nebul grows.

Qualifications

• 3 to 6+ years of experience in security engineering, DevSecOps, or a highly technical SecOps role.
• Hands-on experience integrating and managing security tooling within CI/CD pipelines.
• Practical experience with Semgrep, Trivy, Gitleaks, Checkov, or comparable tools.
• Experience working in self-hosted, bare-metal, private-cloud, or similarly infrastructure-heavy environments.
• Strong Linux administration and operating-system level security knowledge.
• Solid Kubernetes security knowledge (RBAC, Network Policies, Admission Controllers).
• Experience securing container lifecycles (registries, image signing, verification).
• Strong scripting and automation in Python, Bash, or Go.
• Fluency with APIs, JSON, YAML, and security scanner outputs.
• Knowledge of ISO 27001, SOC 2, or NIST frameworks.
• Ability to explain root causes and impacts of vulnerabilities clearly.

Responsibilities

• Integrate security into CI/CD pipelines and engineering workflows across Nebul.
• Implement and maintain security scanning using Semgrep, Trivy, Gitleaks, Checkov, and similar tools.
• Build automated security checks for code, dependencies, secrets, containers, and IaC.
• Work with Cloud/Platform/AI/Infrastructure teams to identify vulnerabilities and remediate.
• Secure Kubernetes environments with RBAC, Network Policies, and Admission Controllers.
• Improve container lifecycle security: scanning, signing and verification.
• Harden Linux OS using eBPF, SELinux/AppArmor, kernel hardening, and systemd security features.
• Develop security automation with Python, Bash, and/or Go.
• Create webhooks and security workflows for custom integrations.
• Support vulnerability management processes and incident response.

Skills

Security Engineering

DevSecOps

SecOps

CI/CD

Kubernetes security

RBAC

Network Policies

Admission Controllers

eBPF

SELinux/AppArmor

kernel hardening

systemd security features

Python/Bash/Go

APIs/JSON/YAML

ISO 27001/SOC 2/NIST

Tools

Semgrep

Trivy

Gitleaks

Checkov

Job description

Nebul, based in the Netherlands, is building Europe’s sovereign AI cloud. We seek a Medior/Senior Security Engineer to join as our first dedicated security engineer and help mature our security posture with the CISO and engineering teams.

You’ll split your time around 70% DevSecOps and 30% SecOps, embedding security into CI/CD, Kubernetes, and our infrastructure, while strengthening vulnerability management, monitoring, and incident response as Nebul grows.