DevSecOps Engineer

Venquis; Lisboa; Presencial; EUR 60 000 - 85 000; Tempo integral

Resumo da oferta

Venquis is seeking a hands-on DevSecOps/Cloud Security Engineer to embed security across Azure, Azure DevOps and the software delivery lifecycle. You will collaborate with DevOps, Engineering and Security teams to strengthen cloud security, CI/CD controls and vulnerability management.

In this role you will implement security controls across pipelines, manage SAST/SCA, secrets, IaC, and container scanning, and automate processes with PowerShell, Python and Azure tools while producing runbooks and

Qualificações

• Hands-on DevSecOps or Cloud Security experience.
• Strong Azure security expertise and Azure DevOps CI/CD knowledge.
• Experience implementing CI/CD security controls (SAST, SCA, secrets, IaC or container scanning).
• Vulnerability management experience including triage and remediation.

Responsabilidades

• Implement and maintain security controls across Azure DevOps CI/CD pipelines.
• Manage security tooling including SAST, SCA, secrets, IaC, container and vulnerability scanning.
• Operate and improve Azure security controls, including Defender for Cloud, Entra ID, RBAC/PIM and Key Vault.
• Triage, prioritise and track vulnerabilities and security findings through to remediation.
• Work with Engineering and DevOps teams to resolve security issues without creating unnecessary delivery friction.
• Automate security processes using PowerShell, Python, Azure CLI, Logic Apps or similar.
• Develop runbooks, dashboards, metrics and operational documentation to support security operations and CISO reporting.
• Support security incidents and continually improve security controls and processes.

Conhecimentos

DevSecOps

Cloud Security

Azure security

Azure DevOps

Scripting (PowerShell/Python)

Ferramentas

PowerShell

Python

Azure CLI

Terraform/Bicep

Defender for Cloud

Entra ID / Key Vault

Descrição da oferta de emprego

Hands‑on DevSecOps / Cloud Security Engineer responsible for embedding security across Azure, Azure DevOps and the software delivery lifecycle. You'll work closely with DevOps, Engineering and Security teams to improve cloud security, CI/CD controls and vulnerability management.

Key Responsibilities

• Implement and maintain security controls across Azure DevOps CI/CD pipelines.
• Manage security tooling including SAST, SCA, secrets, IaC, container and vulnerability scanning.
• Operate and improve Azure security controls, including Defender for Cloud, Entra ID, RBAC/PIM and Key Vault.
• Triage, prioritise and track vulnerabilities and security findings through to remediation.
• Work with Engineering and DevOps teams to resolve security issues without creating unnecessary delivery friction.
• Automate security processes using PowerShell, Python, Azure CLI, Logic Apps or similar.
• Develop runbooks, dashboards, metrics and operational documentation to support security operations and CISO reporting.
• Support security incidents and continually improve security controls and processes.

Essential Experience

• Hands‑on experience in DevSecOps, Security Engineering or Cloud Security.
• Strong Azure security experience.
• Experience with Azure DevOps and CI/CD pipelines.
• Practical experience implementing CI/CD security controls such as SAST, SCA, secrets, IaC or container scanning.
• Vulnerability management experience, including triage, prioritisation and remediation.
• Experience working directly with DevOps/Engineering teams.
• Scripting/automation experience with PowerShell, Python, Azure CLI or similar.

Nice to Have

• Microsoft Sentinel / KQL
• Terraform/Bicep
• Container/Kubernetes security
• Defender for Cloud
• Azure/security certifications