DevSecOps Engineer

moOngy; Portugal; Híbrido; EUR 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Resumo da oferta

MoOngy is seeking a DevSecOps Engineer to strengthen secure CI/CD pipelines in a hybrid Portugal-based role. The position emphasizes security, automation, and scalable software delivery across diverse contexts.

You will manage security and obsolescence risks, work with SBOMs and security scanning tools, and collaborate with an international team to advance automation and best practices in a technology-driven environment.

Qualificações

• Experience designing and maintaining industrial CI/CD pipelines with security controls.
• Experience managing security and obsolescence risks, including library EOL.
• Experience with SBOMs and security scanning tools such as JFrog Xray.
• Familiarity with GitLab CI, Azure DevOps, or Jenkins and secure pipelines.

Responsabilidades

• Design and maintain industrial CI/CD pipelines, integrating security controls.
• Manage security and obsolescence risks, including library EOL risks and dependencies.
• Work with SBOMs and security scanning tools, including JFrog Xray or similar, without direct access to application source code.

Conhecimentos

Security-minded

CI/CD

Cloud & DevOps

Ferramentas

GitLab CI

Azure DevOps

Jenkins

JFrog Xray

CycloneDX

SPDX

Descrição da oferta de emprego

Founded in 2005, MoOngy is an international group specialized in Engineering and IT, operating across Europe and North Africa.

With a presence in 14 countries, more than 40 entities, and 9,500 talents, we continue to grow everyday thanks to one simple thing: people who are genuinely passionate about technology and innovation.

DevSecOps Engineer

hybrid - 2/3 days a week in the office

Currently living in Portugal and be legally authorized to work there

• Security & Obsolescence, library obsolescence / EOL risks;
• CI/CD, GitLab CI, Azure DevOps, Jenkins or equivalent, CI/CD pipeline security controls, industrial CI/CD pipelines;
• SBOM, CycloneDX, SPDX, ability to work from SBOMs;
• JFrog Xray or similar security scanning tools, dependency management and repositories.

Nice to have

• Interest in automation, agent-based approaches or GitHub Copilot;
• Contribution to standards or development methodologies.

Responsibilities

• Design and maintain industrial CI/CD pipelines, integrating security controls;
• Manage security and obsolescence risks, including library EOL risks and dependencies;
• Work with SBOMs and security scanning tools, including JFrog Xray or similar, without direct access to application source code.

Why Join Us?

• Innovation & Impact:Play a central role in driving the future through creative solutions
• Continuous learning: Trainings, certifications, and structured career growth.
• Team spirit: An international community where collaboration means something.
• Diversity & inclusion: At MoOngy, everyone belongs — no fine print.

Diversity & Inclusion

At MoOngy Group, we are committed to equality and diversity. We foster a safe, inclusive, and respectful environment where everyone has equal opportunities. We do not discriminate based on age, origin, gender, sexual orientation, disability, or any criterion unrelated to skills and merit.