DevSecOps Engineer

emagine; Lisboa; Presencial; EUR 50 000 - 70 000; Tempo integral

Resumo da oferta

emagine is seeking a DevSecOps Engineer in Lisbon, Portugal to design, optimize and secure CI/CD pipelines across multiple projects. You will embed security controls throughout the SDLC and ensure compliance with security standards.

The ideal candidate will have hands-on experience with GitLab CI, Azure DevOps, Jenkins, Artifactory, and SBOM tooling (CycloneDX/SPDX), plus familiarity with security scanning (e.g., JFrog Xray) and dependency management.

Qualificações

• Extensive experience building and maintaining CI/CD pipelines across projects.
• Ability to embed security controls throughout the software life cycle.
• Familiarity with SBOMs (CycloneDX, SPDX) and security scanning tools.
• Solid knowledge of dependency management and repositories.

Responsabilidades

• Design and maintain industrial CI/CD pipelines across multiple projects.
• Implement security controls within CI/CD frameworks.
• Ensure compliance with security standards.
• Execute thorough security scanning of applications.

Conhecimentos

CI/CD

Security integration

Pipelines design

Security controls

SBOM knowledge

JFrog Xray

Artifactory

GitLab CI

Azure DevOps

Jenkins

Compliance awareness

Ferramentas

GitLab CI

Azure DevOps

Jenkins

Artifactory

CycloneDX

SPDX

JFrog Xray

Descrição da oferta de emprego

This role requires a dedicated DevSecOps Engineer with extensive expertise in CI/CD processes and security integration. The ideal candidate will demonstrate solid experience in developing and maintaining CI/CD pipelines, while ensuring security measures are embedded throughout the software development lifecycle.

Main Responsibilities:

The primary responsibility of this role is to design and optimize CI/CD pipelines while integrating necessary security protocols.

• Design and maintain industrial CI/CD pipelines across multiple projects.
• Implement security controls within CI/CD frameworks.
• Ensure compliance with security standards.
• Execute thorough security scanning of applications.

Key Requirements:

• Strong experience in CI/CD (GitLab CI, Azure DevOps, Jenkins, or equivalent).
• Ability to design and maintain industrial CI/CD pipelines.
• Solid knowledge of dependency management and repositories (Artifactory or equivalent).
• Experience integrating security controls into CI/CD pipelines.
• Good knowledge or hands-on experience with SBOM (CycloneDX, SPDX, etc.).
• Experience with JFrog Xray or similar security scanning tools.